Deployment server

[sekhar123]

What is meant by deployment server and what does it do?

[sekhar123]

Thank you for the reply gcusello

[gcusello]

Hi @sekhar123,

Read the documentation and implement a lab to fully understand the advantages using the Forwarder Management feature using a Deployment Server.

let me know if I can help you more, or, please, accept one answer for the other people of Community.

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

[isoutamo]

Hi

if you already have any CI/CD system up and running you could it instead of setting up DS.

Currently the biggest issues with DS are:

• you cannot install/ update UF with it “natively” (doable wit own scripts)
• you cannot serialize configuration installation and reboot e.g. parallel HFs

But if you haven’t already working system, you should use it.

r. Ismo

[gcusello]

Hi @sekhar123,

as you can read at https://docs.splunk.com/Documentation/Splunk/9.0.5/Updating/Aboutdeploymentserver , a Deployment Server is a role that assume Splunk Enterprise in complex architectures.

Starting from the beginning:

it permits to push configurations to Universal and Heavy Forwarders in centralized way avoiding to access each of them one by one for each configuration update.

It can reside in a Splunk Server shared with other roles if it has to manage less than 50 clients, otherwise a dedicated server is required.

It's a full Splunk Enterprise installation without using the features of indexing and searching, but only Forwarder Management.

I hint to analyze it because it's a fondamental role in each Splunk architecture, as you can read at https://www.splunk.com/en_us/pdfs/tech-brief/splunk-validated-architectures.pdf

Ciao.

Giuseppe