Getting Data In

Hard limit on whitelist for deployment server

tevgey23
Explorer

Hello,

Is there a hard limit on the number of servers you can have per whitelist class
Seems I cant add more then ten, does that sound right ???

Tags (1)

phswartz
New Member

Question bump ... "Is there a hard limit on the number of servers you can have per whitelist class?"

We are looking at needing a whitelist of over 2000... (don't ask why ... cause a sane man to go crazy). Will this even work or will deployment server performance just go into the tank?

Thanks!

0 Karma

lguinn2
Legend

I have never seen a whitelist of this size. I don't think it will work. However, would it be possible to create some DNS entries to name classes of servers

dbms_server_group1.mydomain.com (assigned to a number of ip addresses)

web_server_group1.mydomain.com (assigned to a different set of ip addresses)

etc.

and then use the DNS names in your whitelist? (I haven't tried this either, so I suggest a small test first.)

Another possibility is to have a fan-out of deployment servers - although this may be as big a headache as a whitelist of over 2000...

0 Karma

JoeIII
Path Finder

the web interface allows you to add entries beyond 10 (whitelist.9) but they do not show up in the serverclass.conf file. I do not know if this is a limit or a bug in the webUI - it seems to me the webUI should remove the "add" button when you hit the limit if this is the case.

Source: my experience under 5.0.3

0 Karma

lguinn2
Legend

I think the naming goes whitelist.0 whitelist.1 ... whitelist.9 whitelist.a whitelist.b ... whitelist.z

But I can't find anything in the manuals that confirms that. Try it and see.

0 Karma

ppeterson
Path Finder

Is this still applicable in 6.x? Looking to manage deployment clients and will need to support several thousand on each DS.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...