Getting Data In

What happened if universal forwarder is pointed to a new Deployment server?

AlesFrohlich
Explorer

Hello,

Situation:
- Universal forwarder pointed to a temp Deployment server
- Two applications are deployed on the Universal Forwarder from the temp Deployment server

What happened with the two applications if I change Universal Forwarder deployment server configuration and point it to a new Deployment server? The new Deployment server is a fresh server with no applications defined and it is intended.
- Will the applications be deleted by Universal Forwarder?
- Will the applications remain and will be not managed?

Thank you in advance for any reply.

Best Regards,
Ales

0 Karma
1 Solution

adonio
Ultra Champion

Hello AlesFrohlich,
to your questions:
Will the applications be deleted by Universal Forwarder? Yes
- Will the applications remain and will be not managed? No
there are many answers here on how to migrate a deployment server
remember that in order to have apps on your client, you must have them joined to a serverclass (matches apps to clients) no server class = no apps on client even if the apps are on the new Deployment Server
hope it helps

View solution in original post

0 Karma

adonio
Ultra Champion

Hello AlesFrohlich,
to your questions:
Will the applications be deleted by Universal Forwarder? Yes
- Will the applications remain and will be not managed? No
there are many answers here on how to migrate a deployment server
remember that in order to have apps on your client, you must have them joined to a serverclass (matches apps to clients) no server class = no apps on client even if the apps are on the new Deployment Server
hope it helps

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...