...class. I create $SPLUNK_HOME/etc/deployment-apps/App1/local/outputs.conf with the correct settings and I deploy the app but for some reason it does not update the outpts.conf on the clients. W...
...nderstand and My question is when we are in the DeploymentServer Web setting upa new data input. After we select our clients andserverclasses, we also can choose the index.
This confuses me b...
...indows). On the deploymentserver, I create two apps, Splunk_TA_windows and sendtoindexer. I created the inputs.conf in the local folder of the Splunk_TA_windows app:
[WinEventLog://Application]
d...
...e similar across both environments but have addresses and such changed.
From there we would develop a TA in dev for the inputs and parsing for the sourcetype andcreatea new serverclass to r...
I am looking for some help in managing apps using the deploymentserver. Here is the case.
I have two different apps, sending two different logs from the same set of servers. The index and s...
...rror.log.
Got an idea to configure/manage centrally but not sure whether this is the right approach.
1) Createa splunk add-on app for each version separately and likewise createaserverclass...
...props.conf (with i.e. EXTRACT parameter set) on SH. What is the best and proper way to do so? Create two separate apps (one for SH and one for SF)? Or use one app, but disable part of c...