Deployment Architecture

Splunk_TA_nix install from deployment server

rameshlpatel
Communicator

Hi,

I have 9 universal forwarders where i want to install Splunk_TA_nix from deployment server.

Please let me know is it possible to install from deployment server or i have to go one by one to forwarder to install

0 Karma

lukejadamec
Super Champion

Is the deployment server running on a windows system?
If so, you may have problems with permissions on the scripts, and windows vs unix formating of the text files.

You should install the TA on a unix box, and configure it on a unix box, then copy the configured app to the deployment server.

If the deployment server is a unix box, then you should have no problem.

0 Karma

lukejadamec
Super Champion

I see from your new question that you've done some research. The answer is yes. You place the configured TA_unix app on the deployment server in the deployment apps folder. Then you set up the serverclass.conf file on the deployment server. Then you restart the deployment server with the following command:

splunk reload deploy-server

All of the forwarders defined in the serverclass.conf file will check with the deployment server for apps specified in the serverclass.conf file.

The forwarders should already have a deploymentclient.conf file in splunk\etc\system\local.

0 Karma

rameshlpatel
Communicator

Yes my forwarders are setuped but how i will send TA to all forwarders, in that i need some help ?

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

And hopefully you have setup your forwarders to poll the deployment server?

0 Karma

lukejadamec
Super Champion

It should work fine then if the permissions are correct.

0 Karma

rameshlpatel
Communicator

My deployment server is on unix box.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...