Splunk query to get the inputs.conf on the deployment server for specific apps

[Naa_Win]

I know that rest calls don't cover the deployment server apps as they are not memory resident. But is there any way we can monitor Deployment Server which saves the output somewhere and we can monitor that to splunk ?

[PickleRick]

DS is not aware of the structure and functionality of deployment apps. What is your use case? What do you want to achieve?

[gcusello]

Hi @Naa_Win ,

it's always a best practice that all the Splunk Servers (so also DS) send their logs to the Indexers.

So you could create an input on the DS that monitors the files in the /opt/splunk/etc/deployment-apps folder, so they are indexed.

Then you could display them in a custom dashboard, but it's all to develop, I don't know anything already existent.

Ciao.

Giuseppe