Deployment Architecture

What's causing the error after setting the deployment-server?

eymanu
Explorer

Forwarder Management
Repository Location: $SPLUNK_HOME/etc/deployment-apps
The forwarder management interface does not support some settings in your serverclass.conf file. The interface is now read-only. Learn More

I am getting the above error after setting up my deployment-server with the below stanza. Can someone help me fix this issue?

[global]
whitelist.0=*

[serverClass:FWD2Local]
whitelist.0=*
[serverClass:FWD2Local:app:LWFoutputs]
0 Karma
1 Solution

xpac
SplunkTrust
SplunkTrust

Try removing that global whitelist, and see if it works than (might require reload/restart)

View solution in original post

jluo_splunk
Splunk Employee
Splunk Employee

Syntactical issue, perhaps? Stanzas need to have a linebreak inbetween. Try inserting a space between whitelist.0=* and [serverClass:FWD2Local:app:LWFoutputs]

0 Karma

xpac
SplunkTrust
SplunkTrust

Try removing that global whitelist, and see if it works than (might require reload/restart)

hkalavakuntla
New Member

Thank you very much. It worked 🙂

0 Karma

eymanu
Explorer

Thank you very much xpac that did the trick

0 Karma

hkalavakuntla
New Member

Thank you, it worked

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...