Deployment Architecture

deployment server

splunkpoornima
Communicator

hi all,

Assume that we have the deployment seerver with 3 clients named as (A,B,C)

if A client is creating the application and put it in the deplyoment server does the B client can access that???

Tags (1)
0 Karma

bmacias84
Champion

The answer is possibly if you defined your server class correctly. Let elaborate a bit by adding deployment client D. Let say A and B are search heads then C and D are Indexers.

If you have apps called dashboard_2,dashboard_1 and ta_indices. The following config will deploy dashboard_1 to all seach heads and dashboard_2 only to A since we are overriding filters at the serverClass:app level. Also notice we are restartign B when dashboard_2 is deployed. ta_indices will only be deployed to only to C and D.

Also you will need to manually move apps to the deployments server repositor.


[global]
repositoryLocation = %splunk%/etc/deployment-apps
restartSplunkd = false
restartSplunkWeb = false
stateOnClient = disabled
filterType = blacklist


################ Search Stanzas #################
[serverClass:search]
restartSplunkd = false
stateOnClient = false
whitelist.0 = A
whitelist.1 = B


[serverClass:search:app:dashboard_1]
stateOnClient = enabled


[serverClass:search:app:dashboard_2]
restartSplunkWeb = true
stateOnClient=enabled
whitelist.0 = A
blacklist.0 = B


################ Indexers Stanzas #################
[serverClass:indexers]
restartSplunkd = false
stateOnClient = false
whitelist.0 = C
whitelist.1 = D


[serverClass:indexers:app:ta_indices]
stateOnClient = enabled


Note: Overriding one type of filter (whitelist/blacklist) causes the other to be overridden too. If, for example, you override the whitelist, the blacklist will not be inherited from the parent; you must provide one in the stanza.

Definedeploymentclasses

Hope this helps or gets you started. Dont forget to thumbs up or accept answers.

Cheers.

0 Karma

BobM
Builder

You have to tell the deployment server in its serverclass.conf file which clients should have what app. They don't automatically get an app, only if they match the whitelists.

Also there is no automatic way of copying the app from client A onto the deployment server. You would have to do this manually.

See http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Aboutdeploymentserver for more detail.

0 Karma

dart
Splunk Employee
Splunk Employee

All applications you wish to deploy from the deployment server need to be in its repositoryLocation which by default is $SPLUNK_HOME/etc/deployment-apps.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...