Deployment Architecture

Splunk_TA_nix install from deployment server

rameshlpatel
Communicator

Hi,

I have 9 universal forwarders where i want to install Splunk_TA_nix from deployment server.

Please let me know is it possible to install from deployment server or i have to go one by one to forwarder to install

0 Karma

lukejadamec
Super Champion

Is the deployment server running on a windows system?
If so, you may have problems with permissions on the scripts, and windows vs unix formating of the text files.

You should install the TA on a unix box, and configure it on a unix box, then copy the configured app to the deployment server.

If the deployment server is a unix box, then you should have no problem.

0 Karma

lukejadamec
Super Champion

I see from your new question that you've done some research. The answer is yes. You place the configured TA_unix app on the deployment server in the deployment apps folder. Then you set up the serverclass.conf file on the deployment server. Then you restart the deployment server with the following command:

splunk reload deploy-server

All of the forwarders defined in the serverclass.conf file will check with the deployment server for apps specified in the serverclass.conf file.

The forwarders should already have a deploymentclient.conf file in splunk\etc\system\local.

0 Karma

rameshlpatel
Communicator

Yes my forwarders are setuped but how i will send TA to all forwarders, in that i need some help ?

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

And hopefully you have setup your forwarders to poll the deployment server?

0 Karma

lukejadamec
Super Champion

It should work fine then if the permissions are correct.

0 Karma

rameshlpatel
Communicator

My deployment server is on unix box.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...