Deployment Architecture

What happens when changing deployment servers?

mdsnmss
SplunkTrust
SplunkTrust

In order to test configurations before going to production we want to set forwarders to go to our development environment to get inputs and parsing configured properly.

The idea is to script an install that points to our dev environment that will then receive apps based on the server classes that point to the indexer cluster and set some default settings for the forwarder. These apps will be similar across both environments but have addresses and such changed.

From there we would develop a TA in dev for the inputs and parsing for the sourcetype and create a new server class to receive the TA (would also have to go in master-apps for the parsing portion to be done on the indexers). Once everything looks good we want to copy over the TA and create the server class in production and change the deploy poll of the forwarder to the production deployment server.

When the deployment server address is changed do the apps from the dev environment automatically get replaced by the ones in the production environment?

0 Karma

koshyk
Super Champion

We faced the same issue in our enterprise installations. What I do is, create a good naming convention for the "serverclasses". (Assume my company name is ABC)
So I will have

  • ABC_dev_TA-deployments_serverclass
  • ABC_test_TA-deployments_serverclass
  • ABC_prod_TA-deployments_serverclass

Using your build mechanism, you can put anything with prod to PRODUCTION etc.
You can have the flexibility to have required TA's within each serverclass, so it can be flexible to any degree

0 Karma
Get Updates on the Splunk Community!

Monitoring MariaDB and MySQL

In a previous post, we explored monitoring PostgreSQL and general best practices around which metrics to ...

Financial Services Industry Use Cases, ITSI Best Practices, and More New Articles ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Splunk Federated Analytics for Amazon Security Lake

Thursday, November 21, 2024  |  11AM PT / 2PM ET Register Now Join our session to see the technical ...