Getting Data In

Remote installtion of U FWDs on Windows - Specify the deployment server

Thuan
Explorer

HI

We need to remotely install U FWD on thousands of Linux and WIndows systems.

On Linux systems, in the installation script, instead of the statement on deployement server listed below

/opt/splunkforwarder/bin/splunk set deploy-poll \"$DEPLOY_SERVER\" --accept-license --answer-yes --auto-ports --no-prompt -auth admin:changeme

I use the following statement which I believe provides a better practice

cp –r all_deploymentclient /fmac/Splunkforwarder/etc/apps

where the directory all_deploymentclient includes the following two files

+++
host070> more deploymentclient.conf
[deployment-client]

10 minutes

phoneHomeIntervalInSecs = 600

[target-broker:deploymentServer]

Change the targetUri

targetUri = x.x.x.x:8089

++++
host070> more app.conf
[install]
state = enabled

[package]
check_for_updates = false
+++

How can I replicate the same functionality on Windows servers using Windows scripting? I could not find any such information on

http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/DeployaWindowsdfviathecommandline

Thank you for your help

0 Karma

muebel
SplunkTrust
SplunkTrust

Hi Thuan, You'd want to create a powershell script that had something like:

copy-item all_deploymentclient "$env:programfiles\splunkuniversalforwarder\etc\apps" -recurse
stop-service *splunk*
start-service *splunk*

Please let me know if this helps!

0 Karma

Thuan
Explorer

Great. Thank you. I am blind on Windows as one can be.

0 Karma

muebel
SplunkTrust
SplunkTrust

no problem. please mark the answer accepted if it works for you, or feel free to ask for more clarification 😄

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...