...xample, Network input ones goes to Cloud without issues; same for Windows ones)
Info about sourcetype and index and their deployment
We create a custom addon that simply provide the sourcetype "f...
...orwarder for an existing log file:
Deployment server
cat $SPLUNK_HOME/etc/deployment-apps/qwerty-app/default/inputs.conf
[monitor:///opt/log/junk]
disabled = false
index = qwerty
w...
...locations, two of which were backup locations. We have the app's inputs.conf file under 1. /export/opt/splunk/etc/deployment-apps/pingfederate/default/inputs.conf
2. /export/o...
...ike to monitor the /var/log/lastlog file. But this does not work with inputs.conf.
I have now installed a Splunk Add-on for Unix and linux. How can I set this up so that my deployment server d...
...essages] sourcetype=syslog index=syslog
A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new inputs.conf file:
/opt/splunk/etc/deployment...
We have a server acting only as a SplunkDeployment Server v4.3.2 and we have activated DeploymentMonitor v4.3.2. Our problem is that "DeploymentMonitor -> Home", "DeploymentMonitor -> All F...
when I try to enable this app i get:
Error occurred attempting to enable SplunkDeploymentMonitor: In handler 'localapps': Cannot update application info: /nobody/SplunkDeploymentMonitor/app/i...
...” and see on it all about of the healthy of my splunk environment.
There's a way to forward this kind of information to indexers and enable the “SplunkDeploymentMonitorApp” on the search h...
When I try to disable the DeploymentMonitor from the Manager, I get the following error:
Error occurred attempting to disable SplunkDeploymentMonitor: In handler 'localapps': Cannot update app...