Splunk Enterprise Security

How to install UF on servers that installed from an Image server?

yossefn
Path Finder

Hi,

We have a Citrix farm used for browsing by our Call center agents. The Terminal servers are reinstalled automatically every day or two from an Image server, for security reasons.
My question is, how can I deploy Universal Forwarders on the Image server so it'll installed it on the Terminals and not to have duplicate servers on Splunk?
By Citrix, it's called "Citrix provisioning service".

Thanks.

0 Karma

harsmarvania57
Ultra Champion
0 Karma
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...