Getting Data In

How do I get a Splunk script to run on all universal forwarders in my environment?

akelly4
Path Finder

I'm trying to get a script to run on all of the servers I have universal forwarders on. When I setup my script I went through the GUI to setup the script

Script path $Splunk_HOME\etc\app\search\bin
Script Name Status.cmd

The script runs but it only runs on the server. How do I get the script to run on all of the forwarders?

dwaddle
SplunkTrust
SplunkTrust

I think you may be missing something important architecturally here. To be able to "push a script" to forwarders, you need:

  1. The script itself, packaged in the form of a Splunk app. (Leaving it in the search app won't do)
  2. A Splunk deployment server to distribute the app to clients
  3. Forwarders that are configured to check in (poll) that deployment server

Without (at least) these three things you won't have success. This doc link may help you get closer:

http://docs.splunk.com/Documentation/Splunk/6.2.2/Updating/Aboutdeploymentserver

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Reuse: Word-play

This puzzle series (first published here) is based on analysing words.Some of the statements in your puzzle ...

Tuning Edge Processor in Hybrid Mode: What Limits Each Data Path

When you run Edge Processor in hybrid mode, alongside a Splunk heavy forwarder on the same host, two questions ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...