Deployment Architecture

Why is information missing after editing serverclass.conf in the deployment server?

ankithreddy777
Contributor

I am trying to edit the serverclass.conf in the deployment server to push app to one of the forwarders. when I tried to open it I don't see any of the previous entries in the serverclass.conf except the [global] stanza.

0 Karma

jcrabb_splunk
Splunk Employee
Splunk Employee

If you get a btool output for serverclass.conf from the deployment server, what do you see?

...for *nix in $SPLUNK_HOME/bin/

./splunk btool serverclass list --debug > outputfilename.txt

You can then cat/less/vi the outputfilename.txt and it will show you all the serverclass.conf settings and where they are located. The settings may be in a location other than where you are looking.

Jacob
Sr. Technical Support Engineer
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...