Getting Data In

Can refresh method push new apps from DS ServerClass to universal forwarder in AWS environment?

theouhuios
Motivator

We have a large AWS Environment and I want to try if we can refresh the UF to get the apps mentioned for it the DS Serverclass without a restart. If so, how is it possible? Is restart the only way to deploy new apps and start collecting the data?

0 Karma

starcher
Influencer

You do not push from DS. You update your app and do a reload deploy-server. That makes the update available to the UFs next time they check in and they pull the app if the checksum does not match indicating they need the new app. If you are involving changes to inputs.conf then in a lot of cases you do need to allow restart splunkd in the serverclass.conf stanza. Usually such auto restart is not an issue.

0 Karma
Get Updates on the Splunk Community!

Splunk and Fraud

Watch Now!Watch an insightful webinar where we delve into the innovative approaches to solving fraud using the ...

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...