Getting Data In

Hard limit on whitelist for deployment server

tevgey23
Explorer

Hello,

Is there a hard limit on the number of servers you can have per whitelist class
Seems I cant add more then ten, does that sound right ???

Tags (1)

phswartz
New Member

Question bump ... "Is there a hard limit on the number of servers you can have per whitelist class?"

We are looking at needing a whitelist of over 2000... (don't ask why ... cause a sane man to go crazy). Will this even work or will deployment server performance just go into the tank?

Thanks!

0 Karma

lguinn2
Legend

I have never seen a whitelist of this size. I don't think it will work. However, would it be possible to create some DNS entries to name classes of servers

dbms_server_group1.mydomain.com (assigned to a number of ip addresses)

web_server_group1.mydomain.com (assigned to a different set of ip addresses)

etc.

and then use the DNS names in your whitelist? (I haven't tried this either, so I suggest a small test first.)

Another possibility is to have a fan-out of deployment servers - although this may be as big a headache as a whitelist of over 2000...

0 Karma

JoeIII
Path Finder

the web interface allows you to add entries beyond 10 (whitelist.9) but they do not show up in the serverclass.conf file. I do not know if this is a limit or a bug in the webUI - it seems to me the webUI should remove the "add" button when you hit the limit if this is the case.

Source: my experience under 5.0.3

0 Karma

lguinn2
Legend

I think the naming goes whitelist.0 whitelist.1 ... whitelist.9 whitelist.a whitelist.b ... whitelist.z

But I can't find anything in the manuals that confirms that. Try it and see.

0 Karma

ppeterson
Path Finder

Is this still applicable in 6.x? Looking to manage deployment clients and will need to support several thousand on each DS.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

Tech Talk Recap   From Chaos to Control: Scaling Splunk Cloud with Infrastructure as Code Managing apps in ...