Getting Data In

Is it possible to symbolically link conf files in etc/apps to /etc/deployment-apps on a heavy forwarder?

sw5269
New Member

I have a client system that we are splunking who is using a set of heavy forwarders.
Our Splunk system does not have access to their universal forwarders.
When deployment is conducted from my system to their Heavies the admins of the Heavies take the updated files deployed to their etc/apps and then copy them to their /etc/deployment-apps prior to deploying them out to their universal forwarders.
Is it possible to symbolically link the conf files that get deployed, in their etc/apps dir, to their etc/deployment-apps so that when I deploy to them their intermediate step of having to copy those files from apps to deployment-apps is eliminated?
As a further step is it possible when I deploy to their Heavies, to kick off a script on their Heavies to run the "splunk reload deploy-server -class" command thereby eliminating the necessity of having to duplicate efforts on a system that I dont actually have access too.

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi sw5269,

if you want to kick off a script running splunk reload deploy-server -class anyway, why not simply run a nightly cron jobs which runs for example

rsync -au etc/apps/ etc/deployment-apps/ and then kicks off
splunk reload deploy-server -class.

This way you know exactly where to check if the deploy to the final UF's fails. You could even output the result of this script into splunk> ...

cheers, MuS

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...