Deployment Architecture

serverclass.conf: Is it possible to nest serverclasses?

arjangoos
Path Finder

Is it possible to nest serverclasses?

[serverClass:UF_acc]
whitelist.0=host3
whitelist.1=host4

[serverClass:UF_all]
whitelist.0=host1
whitelist.1=host2
whitelist.2=UF_acc

so I want to add the class UF_acc to the class UF_all.

Tags (1)
0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

No, this is not possible. white/black lists are hostname/ip only. You could use a machine type filter to specify all UFs.

http://docs.splunk.com/Documentation/Splunk/6.2.4/Admin/Serverclassconf

View solution in original post

alacercogitatus
SplunkTrust
SplunkTrust

No, this is not possible. white/black lists are hostname/ip only. You could use a machine type filter to specify all UFs.

http://docs.splunk.com/Documentation/Splunk/6.2.4/Admin/Serverclassconf

Get Updates on the Splunk Community!

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...