Getting Data In

Using the Splunk deployment server to manage the inputs.conf file for multiple servers

tevgey23
Explorer

Is it possible to create different classes of servers so when the forwarder checks in, it get a specific configuration for the inputs.conf file.

So the goal here would be to have all the mail servers have a set of inputs.conf file
and the webservers have their own and so on..

0 Karma

ChrisG
Splunk Employee
Splunk Employee

Sure, you want to use server classes.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...