How to configure multiple host names in a single inputs.conf file, and push this to all servers in a server class via deployment server?

[sujith_usha_kum]

Hi All,

We have a deployment server configured in our server.
We want to push a single inputs.conf file to all the servers in the server class.

Please help me on how to use host= in the inputs.conf file, where we have multiple servers under one server class.

thanks

[ddrillic]

Keep in mind please that the hosts are specified in etc/system/local/serverclass.conf.

How many apps do you have under etc/deployment-apps?

[sujith_usha_kum]

Thanks.

etc/system/local/serverclass.conf is to white and blacklist the servers under each serverclass is it?
But my requirement is to use one input.conf file for a set of servers under the server class.
So do i need to specify the "host=" keyword to mention the client names?
If yes, how to specify multiple client name under "host="

I have 10 apps under etc/deployment-apps

[ddrillic]

I see, quite often we simply don't specify the host in inputs.conf and Splunk will determine what it is based on the machine's info. It's pretty good and we have been using it in this way for a couple of years. One issue we are running into is the fact that some hosts define their name using a full domain name and some don't. But if you don't have this issue, you might rely on Splunk for that...

[sujith_usha_kum]

Thanks ddrillic. I will try not using host in inputs.conf