Deployment Architecture

What happens when changing deployment servers?

mdsnmss
SplunkTrust
SplunkTrust

In order to test configurations before going to production we want to set forwarders to go to our development environment to get inputs and parsing configured properly.

The idea is to script an install that points to our dev environment that will then receive apps based on the server classes that point to the indexer cluster and set some default settings for the forwarder. These apps will be similar across both environments but have addresses and such changed.

From there we would develop a TA in dev for the inputs and parsing for the sourcetype and create a new server class to receive the TA (would also have to go in master-apps for the parsing portion to be done on the indexers). Once everything looks good we want to copy over the TA and create the server class in production and change the deploy poll of the forwarder to the production deployment server.

When the deployment server address is changed do the apps from the dev environment automatically get replaced by the ones in the production environment?

0 Karma

koshyk
Super Champion

We faced the same issue in our enterprise installations. What I do is, create a good naming convention for the "serverclasses". (Assume my company name is ABC)
So I will have

  • ABC_dev_TA-deployments_serverclass
  • ABC_test_TA-deployments_serverclass
  • ABC_prod_TA-deployments_serverclass

Using your build mechanism, you can put anything with prod to PRODUCTION etc.
You can have the flexibility to have required TA's within each serverclass, so it can be flexible to any degree

0 Karma
Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...