Installation

Can I script add new deployment clients to a Server Class?

eburnett
Engager

So when we build a new server and install the Splunk forwarder on the server.

Is there a way to script to add that new deployment client to a Server Class?

Labels (2)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @eburnett,

why don't you try a different approach: instead to list all the hostnames of clients of a ServerClass, try to use a generic definition in whitelist?

e.g.: if you want in a ServerClass all the windows servers except Domain Controllers, you could put:

  • * in whitelist,
  • windows X64 in type,
  • domain1, domain2, domain3 in blacklist

in this way adding a new server windows, automatically it will be inserted in that ServerClass.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...