Getting Data In

Splunk server Vs Windows agent

kpsnathan_splun
New Member

Hello,

Splunk server in linux and agent in windows.

1)How to check from client or server cofig files ?
2)I created the deploymentclient.conf file under c:\program file\splunk\etc\system\local.
and restarted spulnkd service. Any services need to be restarted along with this...?

Please reply me as soon as possible.

Thanks,
Swami....

Tags (1)
0 Karma

lguinn2
Legend

From the deployment server, you can see which clients have connected:

./splunk list deploy-clients

On the deployment client, you can do

cd c:program files\splunk\bin
splunk display deploy-server

Some other questions (which may not be as relevant):

  • Are other deployment clients working? If no, then your problem might be on the deployment server, not the client...
  • Are you just setting up the deployment server? Try restarting it.
  • Have you reloaded the deployment server since you added new content? ./splunk reload deploy-server

Finally, I have found this search (or some variation) to be helpful

index="_internal" sourcetype="splunkd" component="DeploymentMetrics" | rename scName as serverClass fqname as install_location hostname as deploymentClient | table _time deploymentClient ip serverClass appName event status reason install_location
0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...