Getting Data In

What happened if universal forwarder is pointed to a new Deployment server?

AlesFrohlich
Explorer

Hello,

Situation:
- Universal forwarder pointed to a temp Deployment server
- Two applications are deployed on the Universal Forwarder from the temp Deployment server

What happened with the two applications if I change Universal Forwarder deployment server configuration and point it to a new Deployment server? The new Deployment server is a fresh server with no applications defined and it is intended.
- Will the applications be deleted by Universal Forwarder?
- Will the applications remain and will be not managed?

Thank you in advance for any reply.

Best Regards,
Ales

0 Karma
1 Solution

adonio
Ultra Champion

Hello AlesFrohlich,
to your questions:
Will the applications be deleted by Universal Forwarder? Yes
- Will the applications remain and will be not managed? No
there are many answers here on how to migrate a deployment server
remember that in order to have apps on your client, you must have them joined to a serverclass (matches apps to clients) no server class = no apps on client even if the apps are on the new Deployment Server
hope it helps

View solution in original post

0 Karma

adonio
Ultra Champion

Hello AlesFrohlich,
to your questions:
Will the applications be deleted by Universal Forwarder? Yes
- Will the applications remain and will be not managed? No
there are many answers here on how to migrate a deployment server
remember that in order to have apps on your client, you must have them joined to a serverclass (matches apps to clients) no server class = no apps on client even if the apps are on the new Deployment Server
hope it helps

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...