Deployment Architecture

What happens when changing deployment servers?

mdsnmss
SplunkTrust
SplunkTrust

In order to test configurations before going to production we want to set forwarders to go to our development environment to get inputs and parsing configured properly.

The idea is to script an install that points to our dev environment that will then receive apps based on the server classes that point to the indexer cluster and set some default settings for the forwarder. These apps will be similar across both environments but have addresses and such changed.

From there we would develop a TA in dev for the inputs and parsing for the sourcetype and create a new server class to receive the TA (would also have to go in master-apps for the parsing portion to be done on the indexers). Once everything looks good we want to copy over the TA and create the server class in production and change the deploy poll of the forwarder to the production deployment server.

When the deployment server address is changed do the apps from the dev environment automatically get replaced by the ones in the production environment?

0 Karma

koshyk
Super Champion

We faced the same issue in our enterprise installations. What I do is, create a good naming convention for the "serverclasses". (Assume my company name is ABC)
So I will have

  • ABC_dev_TA-deployments_serverclass
  • ABC_test_TA-deployments_serverclass
  • ABC_prod_TA-deployments_serverclass

Using your build mechanism, you can put anything with prod to PRODUCTION etc.
You can have the flexibility to have required TA's within each serverclass, so it can be flexible to any degree

0 Karma
Get Updates on the Splunk Community!

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

A Guide To Cloud Migration Success

As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus ...

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...