- Find Answers
- :
- Splunk Administration
- :
- Monitoring Splunk
- :
- How to change server roles in the Distributed Mana...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
In the console, you can change the server roles of the instances in the Distributed Management Console manually. How can you do this using CLI commands or editing conf files? There is little to no documentation about configuring DMC using CLI.
Thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi kimche,
There is no special Splunk CLI command to do this.
But, since the server role of an instance is set in $SPLUNK_HOME/etc/apps/splunk_management_console/lookups/assets.csv you can basically use any method to modify this file; vi for example, Puppet, Deployment server or the Splunk lookup editor just to name a few.
Hope this helps ...
cheers, MuS
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi kimche,
There is no special Splunk CLI command to do this.
But, since the server role of an instance is set in $SPLUNK_HOME/etc/apps/splunk_management_console/lookups/assets.csv you can basically use any method to modify this file; vi for example, Puppet, Deployment server or the Splunk lookup editor just to name a few.
Hope this helps ...
cheers, MuS
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The server role is not only related to the assets.csv file, but also related to distributed search groups, which is a different story. The assets.csv file needs to be in sync with the distributed search group. But there is no easy way to modify distributed search group. So, I would suggest just go to the Setup UI page and manually modify server role there (instead of directly editing assets.csv), to avoid any unexpected behavior.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Okay, if it's related to the distributed search group as well one can modify the distsearch.conf file to create or modify the group http://docs.splunk.com/Documentation/Splunk/6.3.0/DistSearch/Distributedsearchgroups . This can be done using git, puppet, vi, rsync ......... what ever your flavour is.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks ykou and MuS: I managed to do it by making distributed search groups. Still weird that the assets.csv is missing though.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank for your answer MuS! In my machine there is no assets.csv (or lookups folder) at all. Does this folder and csv file automatically get created when the DMC machine gets launched or do I need to do another step to enable it (I did already add the search peers in the distributed search).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This will probably be created during the initial setup of DMC http://docs.splunk.com/Documentation/Splunk/6.3.0/DMC/Deploymentsetupsteps
New This Month in Splunk Observability Cloud - Metrics Usage Analytics, Enhanced K8s ...
Alerting Best Practices: How to Create Good Detectors
Discover Powerful New Features in Splunk Cloud Platform: Enhanced Analytics, ...
