- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How do I get a Splunk script to run on all universal forwarders in my environment?
akelly4
Path Finder
03-25-2015
01:36 PM
I'm trying to get a script to run on all of the servers I have universal forwarders on. When I setup my script I went through the GUI to setup the script
Script path $Splunk_HOME\etc\app\search\bin
Script Name Status.cmd
The script runs but it only runs on the server. How do I get the script to run on all of the forwarders?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

dwaddle

SplunkTrust
03-25-2015
03:07 PM
I think you may be missing something important architecturally here. To be able to "push a script" to forwarders, you need:
- The script itself, packaged in the form of a Splunk app. (Leaving it in the
search
app won't do) - A Splunk deployment server to distribute the app to clients
- Forwarders that are configured to check in (poll) that deployment server
Without (at least) these three things you won't have success. This doc link may help you get closer:
http://docs.splunk.com/Documentation/Splunk/6.2.2/Updating/Aboutdeploymentserver
