Deployment Architecture

UniversalForwarder / Splunk_TA_Windows re-load output.conf ?

New Member

I had a problem where my output.conf file was incorrect (Linux formatting, instead ^M newline formatted for Windows).

I've updated the output.conf file on the deployment server in:
deployment-apps/Splunk_TA_windows/default/

However, the clients don't seem to be updating / replacing their output.conf file. (They're "phoning in", and I re-ran /opt/splunk/bin/splunk reload deploy-server).

Is there a way to tell clients to re-load/refresh their apps?

0 Karma

Super Champion

Add a comment line to the outputs.conf on the deployment server. Something like:

#new version

That will be enough to cause an update following a deploy-server reload.

0 Karma