Getting Data In

Heavy Forwarder as Deployment Server

Torben_Volkmann
New Member

Hello,

Is it possible to use a heavy forwarder as deployment server, too? I try to install 2 servers like this: http://answers.splunk.com/answers/37649/multiple-deployment-servers-configuration

Because the indexer is in a different subnet than some of the servers.

Thank you for your help.

Best regards,

Torben

0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

It is possible to use a heavy forwarder as a deployment server, since it is a full instance of Splunk. Do you already have a Deployment Server? if this is a new one, it will work just fine out of the box. If you have to do a tiered option, there are some other considerations you will need.

View solution in original post

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

It is possible to use a heavy forwarder as a deployment server, since it is a full instance of Splunk. Do you already have a Deployment Server? if this is a new one, it will work just fine out of the box. If you have to do a tiered option, there are some other considerations you will need.

0 Karma

Torben_Volkmann
New Member

The whole environment is build from scratch. There is already a deployment server, but this is not able to reach server on side b. He is only able to reach the heavy forwarder and vice versa.

I think a tiered option is not necessary.

My question was created, because I received an error message in the forwared management on the heavy forwarder yesterday, which disapeared after I switched the licenses.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...

A Four-Part Event Series: State of Observability - Where AI Meets Performance

As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, ...