Getting Data In

Hard limit on whitelist for deployment server

tevgey23
Explorer

Hello,

Is there a hard limit on the number of servers you can have per whitelist class
Seems I cant add more then ten, does that sound right ???

Tags (1)

phswartz
New Member

Question bump ... "Is there a hard limit on the number of servers you can have per whitelist class?"

We are looking at needing a whitelist of over 2000... (don't ask why ... cause a sane man to go crazy). Will this even work or will deployment server performance just go into the tank?

Thanks!

0 Karma

lguinn2
Legend

I have never seen a whitelist of this size. I don't think it will work. However, would it be possible to create some DNS entries to name classes of servers

dbms_server_group1.mydomain.com (assigned to a number of ip addresses)

web_server_group1.mydomain.com (assigned to a different set of ip addresses)

etc.

and then use the DNS names in your whitelist? (I haven't tried this either, so I suggest a small test first.)

Another possibility is to have a fan-out of deployment servers - although this may be as big a headache as a whitelist of over 2000...

0 Karma

JoeIII
Path Finder

the web interface allows you to add entries beyond 10 (whitelist.9) but they do not show up in the serverclass.conf file. I do not know if this is a limit or a bug in the webUI - it seems to me the webUI should remove the "add" button when you hit the limit if this is the case.

Source: my experience under 5.0.3

0 Karma

lguinn2
Legend

I think the naming goes whitelist.0 whitelist.1 ... whitelist.9 whitelist.a whitelist.b ... whitelist.z

But I can't find anything in the manuals that confirms that. Try it and see.

0 Karma

ppeterson
Path Finder

Is this still applicable in 6.x? Looking to manage deployment clients and will need to support several thousand on each DS.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...