Getting Data In

Remote installtion of U FWDs on Windows - Specify the deployment server

Thuan
Explorer

HI

We need to remotely install U FWD on thousands of Linux and WIndows systems.

On Linux systems, in the installation script, instead of the statement on deployement server listed below

/opt/splunkforwarder/bin/splunk set deploy-poll \"$DEPLOY_SERVER\" --accept-license --answer-yes --auto-ports --no-prompt -auth admin:changeme

I use the following statement which I believe provides a better practice

cp –r all_deploymentclient /fmac/Splunkforwarder/etc/apps

where the directory all_deploymentclient includes the following two files

+++
host070> more deploymentclient.conf
[deployment-client]

10 minutes

phoneHomeIntervalInSecs = 600

[target-broker:deploymentServer]

Change the targetUri

targetUri = x.x.x.x:8089

++++
host070> more app.conf
[install]
state = enabled

[package]
check_for_updates = false
+++

How can I replicate the same functionality on Windows servers using Windows scripting? I could not find any such information on

http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/DeployaWindowsdfviathecommandline

Thank you for your help

0 Karma

muebel
SplunkTrust
SplunkTrust

Hi Thuan, You'd want to create a powershell script that had something like:

copy-item all_deploymentclient "$env:programfiles\splunkuniversalforwarder\etc\apps" -recurse
stop-service *splunk*
start-service *splunk*

Please let me know if this helps!

0 Karma

Thuan
Explorer

Great. Thank you. I am blind on Windows as one can be.

0 Karma

muebel
SplunkTrust
SplunkTrust

no problem. please mark the answer accepted if it works for you, or feel free to ask for more clarification 😄

0 Karma
Get Updates on the Splunk Community!

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...

Want to Reduce Costs, Mitigate Risk, Improve Performance, or Increase Efficiencies? ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...