Getting Data In

Does the deployment server deploy apps to all search heads, indexers, and forwarders?

matutter4
Explorer

I have a small Splunk setup with a just a search head, indexer, and forwarder. I've been installing apps and restarting them by hand, but I'd like to set up a deployment server to do that for me. If I have an app that I only want to run on my search head, will it also be deployed to the indexer and forwarder?

How do I specify what serverclass an app is deployed to?

0 Karma
1 Solution

somesoni2
Revered Legend

Which app will be deployed to which clients is defined in serverclass.conf on the deployment server. I would suggest to go through Splunk docs to understand how a deployment server works and what all configuration files are involved. A start can be done from this link.

http://docs.splunk.com/Documentation/Splunk/6.4.1/Updating/Aboutdeploymentserver

Specific link for serverclass update
http://docs.splunk.com/Documentation/Splunk/6.4.1/Updating/Definedeploymentclasses

View solution in original post

somesoni2
Revered Legend

Which app will be deployed to which clients is defined in serverclass.conf on the deployment server. I would suggest to go through Splunk docs to understand how a deployment server works and what all configuration files are involved. A start can be done from this link.

http://docs.splunk.com/Documentation/Splunk/6.4.1/Updating/Aboutdeploymentserver

Specific link for serverclass update
http://docs.splunk.com/Documentation/Splunk/6.4.1/Updating/Definedeploymentclasses

Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...