Getting Data In

Heavy Forwarder as Deployment Server

Torben_Volkmann
New Member

Hello,

Is it possible to use a heavy forwarder as deployment server, too? I try to install 2 servers like this: http://answers.splunk.com/answers/37649/multiple-deployment-servers-configuration

Because the indexer is in a different subnet than some of the servers.

Thank you for your help.

Best regards,

Torben

0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

It is possible to use a heavy forwarder as a deployment server, since it is a full instance of Splunk. Do you already have a Deployment Server? if this is a new one, it will work just fine out of the box. If you have to do a tiered option, there are some other considerations you will need.

View solution in original post

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

It is possible to use a heavy forwarder as a deployment server, since it is a full instance of Splunk. Do you already have a Deployment Server? if this is a new one, it will work just fine out of the box. If you have to do a tiered option, there are some other considerations you will need.

0 Karma

Torben_Volkmann
New Member

The whole environment is build from scratch. There is already a deployment server, but this is not able to reach server on side b. He is only able to reach the heavy forwarder and vice versa.

I think a tiered option is not necessary.

My question was created, because I received an error message in the forwared management on the heavy forwarder yesterday, which disapeared after I switched the licenses.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Get Agentic with Splunk Lantern: Connect to Cisco Cloud Control, Transform ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

July Community Events: Master ITSI 5.0 & Automate Splunk

Struggling with alert fatigue or feeling like you're spending more time on infrastructure maintenance than ...

New Release of Federated Search: Bringing Splunk Analytics to More of Your Data

Organizations today are generating more data than ever and storing it across cloud object stores, data lakes, ...