Deployment Architecture

serverclass.conf: Is it possible to nest serverclasses?

arjangoos
Path Finder

Is it possible to nest serverclasses?

[serverClass:UF_acc]
whitelist.0=host3
whitelist.1=host4

[serverClass:UF_all]
whitelist.0=host1
whitelist.1=host2
whitelist.2=UF_acc

so I want to add the class UF_acc to the class UF_all.

Tags (1)
0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

No, this is not possible. white/black lists are hostname/ip only. You could use a machine type filter to specify all UFs.

http://docs.splunk.com/Documentation/Splunk/6.2.4/Admin/Serverclassconf

View solution in original post

alacercogitatus
SplunkTrust
SplunkTrust

No, this is not possible. white/black lists are hostname/ip only. You could use a machine type filter to specify all UFs.

http://docs.splunk.com/Documentation/Splunk/6.2.4/Admin/Serverclassconf

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...