Getting Data In

Can refresh method push new apps from DS ServerClass to universal forwarder in AWS environment?

theouhuios
Motivator

We have a large AWS Environment and I want to try if we can refresh the UF to get the apps mentioned for it the DS Serverclass without a restart. If so, how is it possible? Is restart the only way to deploy new apps and start collecting the data?

0 Karma

starcher
Influencer

You do not push from DS. You update your app and do a reload deploy-server. That makes the update available to the UFs next time they check in and they pull the app if the checksum does not match indicating they need the new app. If you are involving changes to inputs.conf then in a lot of cases you do need to allow restart splunkd in the serverclass.conf stanza. Usually such auto restart is not an issue.

0 Karma
Get Updates on the Splunk Community!

New Case Study Shows the Value of Partnering with Splunk Academic Alliance

The University of Nevada, Las Vegas (UNLV) is another premier research institution helping to shape the next ...

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...