Getting Data In

Splunk server Vs Windows agent

kpsnathan_splun
New Member

Hello,

Splunk server in linux and agent in windows.

1)How to check from client or server cofig files ?
2)I created the deploymentclient.conf file under c:\program file\splunk\etc\system\local.
and restarted spulnkd service. Any services need to be restarted along with this...?

Please reply me as soon as possible.

Thanks,
Swami....

Tags (1)
0 Karma

lguinn2
Legend

From the deployment server, you can see which clients have connected:

./splunk list deploy-clients

On the deployment client, you can do

cd c:program files\splunk\bin
splunk display deploy-server

Some other questions (which may not be as relevant):

  • Are other deployment clients working? If no, then your problem might be on the deployment server, not the client...
  • Are you just setting up the deployment server? Try restarting it.
  • Have you reloaded the deployment server since you added new content? ./splunk reload deploy-server

Finally, I have found this search (or some variation) to be helpful

index="_internal" sourcetype="splunkd" component="DeploymentMetrics" | rename scName as serverClass fqname as install_location hostname as deploymentClient | table _time deploymentClient ip serverClass appName event status reason install_location
0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...