Splunk Enterprise Security

How to install UF on servers that installed from an Image server?

yossefn
Path Finder

Hi,

We have a Citrix farm used for browsing by our Call center agents. The Terminal servers are reinstalled automatically every day or two from an Image server, for security reasons.
My question is, how can I deploy Universal Forwarders on the Image server so it'll installed it on the Terminals and not to have duplicate servers on Splunk?
By Citrix, it's called "Citrix provisioning service".

Thanks.

0 Karma

harsmarvania57
SplunkTrust
SplunkTrust
0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!