Getting Data In

Remote installtion of U FWDs on Windows - Specify the deployment server

Thuan
Explorer

HI

We need to remotely install U FWD on thousands of Linux and WIndows systems.

On Linux systems, in the installation script, instead of the statement on deployement server listed below

/opt/splunkforwarder/bin/splunk set deploy-poll \"$DEPLOY_SERVER\" --accept-license --answer-yes --auto-ports --no-prompt -auth admin:changeme

I use the following statement which I believe provides a better practice

cp –r all_deploymentclient /fmac/Splunkforwarder/etc/apps

where the directory all_deploymentclient includes the following two files

+++
host070> more deploymentclient.conf
[deployment-client]

10 minutes

phoneHomeIntervalInSecs = 600

[target-broker:deploymentServer]

Change the targetUri

targetUri = x.x.x.x:8089

++++
host070> more app.conf
[install]
state = enabled

[package]
check_for_updates = false
+++

How can I replicate the same functionality on Windows servers using Windows scripting? I could not find any such information on

http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/DeployaWindowsdfviathecommandline

Thank you for your help

0 Karma

muebel
SplunkTrust
SplunkTrust

Hi Thuan, You'd want to create a powershell script that had something like:

copy-item all_deploymentclient "$env:programfiles\splunkuniversalforwarder\etc\apps" -recurse
stop-service *splunk*
start-service *splunk*

Please let me know if this helps!

0 Karma

Thuan
Explorer

Great. Thank you. I am blind on Windows as one can be.

0 Karma

muebel
SplunkTrust
SplunkTrust

no problem. please mark the answer accepted if it works for you, or feel free to ask for more clarification 😄

0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...