Your Splunk Cloud Platform subscription includes a deployment server license

[jphvpichi]

Hi, 

I am newbie to splunk,, reading the Splunk Cloud Platform Service Details, it says that " Your Splunk Cloud Platform subscription includes a deployment server license for centralized configuration management of your Splunk forwarders. You can request the deployment server license from Splunk support."

So i could enable a deployment server to centralize management configuration for forwarders, so this means that i could configure my forwarders to send data to this deployment server locally and then this server will send data to splunk cloud?.

Additionally, where i could contact support?, the only way is phone call?.

I hope someone help me...

best regards

[kml_uvce]

The Deployment Server does NOT handle data flow. It only manages configurations for your forwarders. 

So your forwarders send data directly to Splunk Cloud, but receive their configuration from the Deployment Server.

What the Deployment Server manages

• inputs.conf (what data to collect)
• outputs.conf (where to send data)
• props.conf, transforms.conf (parsing rules)
• Any apps/add-ons you want deployed to forwarders

This is incredibly useful when you have many forwarders, since you can push configuration changes to all of them centrally instead of logging into each one.

[richgalloway]

Deployment Servers (DS) do not process data.  They're only for managing forwarders.  The forwarders contact the DS, get a list of apps, then download and install them.  Typically, one of those apps contains an outputs.conf file that tells the forwarder how to connect to Splunk Cloud (including the required certificate).

All forwarders *should* send their data directly to Splunk Cloud.  In some circumstances, however, it may be necessary to send the data to an intermediate forwarder (IF) that then sends it to Splunk Cloud.  The IF should NOT be the DS.

Contact Splunk Support by phone or via the support portal.