Deployment Architecture

how to install dedicated deployment server?

fernandoandre
Communicator

Hi

I have seen the Splunk documentation and Splunk answers but i'm unable to find the following information:

If I install Splunk in a server, how do I tell it it will only work as a (dedicated) Deployment Server (does it have any special command)? Or I don't need to do this since the Splunk instance will not receive any data? Furthermore, the licensing for this dedicated instance will be part of the poll of the Indexer licencing right?

(I have found several deployment server strategies and related topics but not this particular one.)

Thanks in advance.

1 Solution

Brian_Osburn
Builder

There's really no dedicated Splunk deployment server install - you can install Splunk as normal and assign it part of the licensing pool. If you don't do any indexing, then it wouldn't count against your license count.

Brian

View solution in original post

Brian_Osburn
Builder

There's really no dedicated Splunk deployment server install - you can install Splunk as normal and assign it part of the licensing pool. If you don't do any indexing, then it wouldn't count against your license count.

Brian

yannK
Splunk Employee
Splunk Employee
0 Karma

fernandoandre
Communicator

I imagined that some command like "$ splunk enable deployment-server" would exist to force that role like there is one for enabling forwarders: "$ splunk enable app SplunkForwarder -auth ..."

But that simple approach works too.

Thank you.

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...