I need to install an updated app on thedeployment server, please provide me the steps/commands to install theadd-on ( updated app) on thedeployment server and then push to other Splunk instances....
Hi,
I know there are several questions with CEF in the subject, but I can not find a certain answer for my problem.
I have a Splunkdeployment with Enterprise Security (and maybe with ITSI in the...
Hello, guys I want change my universal forward for new deployment_server,how to use Current deployment server。 I am currently pushing the app for universal forwarder, but can‘t change deployment_server
...ata and AD data. Do I utilize a deployed app to my forwarders that will "automagically" ingest the data I am looking for or create an inputs.conf file to monitor the events I am looking for. S...
...orkstation is connected tothedeployment server
*I am using a very basic customadd-on app that host the PowerShell command
*CustomAdd-on app info
2 directories -> local and metadata. The local f...
Hello everyone,
I am trying to install forwarder on Linux
chown -R splunk:splunk /opt/splunkforwarder
sudo -u splunk sh -c "/opt/splunkforwarder/bin/splunk set deploy-poll deployment...
...ervicesNS/nobody/ your-appname / instead of just /services .
(Useful if you want the REST call to "come from" a particular app.)
Logging
As of 6.0, tracing tosplunkd.log may be requested b...
...our different apps managed from theDeployment Server, however this is quickly becoming unmanageable.
Each Splunk Server contains the site name in the server's hostname. EX: "siteA-searchHead01"
W...
If I use thecommand ./splunkadd monitor /var/log, -> /splunk/etc/apps/search/local/inputs.conf file will be modified. However, if I use thecommand ./splunkadd forward-server a.a.a.a:9...