Getting Data In

Splunk server Vs Windows agent

kpsnathan_splun
New Member

Hello,

Splunk server in linux and agent in windows.

1)How to check from client or server cofig files ?
2)I created the deploymentclient.conf file under c:\program file\splunk\etc\system\local.
and restarted spulnkd service. Any services need to be restarted along with this...?

Please reply me as soon as possible.

Thanks,
Swami....

Tags (1)
0 Karma

lguinn2
Legend

From the deployment server, you can see which clients have connected:

./splunk list deploy-clients

On the deployment client, you can do

cd c:program files\splunk\bin
splunk display deploy-server

Some other questions (which may not be as relevant):

  • Are other deployment clients working? If no, then your problem might be on the deployment server, not the client...
  • Are you just setting up the deployment server? Try restarting it.
  • Have you reloaded the deployment server since you added new content? ./splunk reload deploy-server

Finally, I have found this search (or some variation) to be helpful

index="_internal" sourcetype="splunkd" component="DeploymentMetrics" | rename scName as serverClass fqname as install_location hostname as deploymentClient | table _time deploymentClient ip serverClass appName event status reason install_location
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...