Getting Data In

Configure a Splunk Deployment Manager

qazwsxedc994
Explorer

So far I have an Fowarder feeding data into my Indexer where I have a search head setup to search the indexes. If i wanted to set up a Deployment Manager to look after my indexer and search head how would i go about configuring this setup?? Im so lost and confused right now.

0 Karma

koshyk
Super Champion

It is straightforward. You just need to provide your "Splunk forwarder" file:

${SPLUNK_FWD_HOME}/etc/apps/deployclient/local/deploymentclient.conf

with below entry

[deployment-client]
[target-broker:deploymentServer]
targetUri = <DEPLOY_SERVER>

I've automated installation of Splunk Forwarder in Windows/Linux. Code can be found here

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...