How do I mass-deploy Universal forwarder to many Linux machines?

[kartreddy4]

I am trying to deploy the Universal forwarders to a large Linux environment. Installing it manually is time consuming, are there any scripts to mass-deploy the agent.

[gcusello]

Hi kartreddy4,
in Splunk answers you can find many scripts to install forwarders, these are some examples:
https://answers.splunk.com/answers/34896/simple-installation-script-for-universal-forwarder.html
https://answers.splunk.com/answers/100989/forwarder-installation-script.html
http://docs.splunk.com/Documentation/Forwarder/7.0.2/Forwarder/Installanixuniversalforwarderremotely...

Bye.
Giuseppe

[ddrillic]

On Linux it's doable. We create a standard unix id for all these servers and via python or ansible deploy the Universal forwarders to them in bulk.

The thing is that there is a set of prerequisites which we need on the servers, prior to the installation, such as connectivity to the splunk servers, dedicated file system, write access to the file system, read access to the logs. All of this we also did via a python script.