Getting Data In

How do I mass-deploy Universal forwarder to many Linux machines?

kartreddy4
New Member

I am trying to deploy the Universal forwarders to a large Linux environment. Installing it manually is time consuming, are there any scripts to mass-deploy the agent.

0 Karma

gcusello
SplunkTrust
SplunkTrust
0 Karma

ddrillic
Ultra Champion

On Linux it's doable. We create a standard unix id for all these servers and via python or ansible deploy the Universal forwarders to them in bulk.

The thing is that there is a set of prerequisites which we need on the servers, prior to the installation, such as connectivity to the splunk servers, dedicated file system, write access to the file system, read access to the logs. All of this we also did via a python script.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...