I've seen documentation that mult-tenated/silo-ed or a hierarchical architecture can be created with Splunk deployment servers, but I haven't seen any useful examples of how this can be configured.
My overall goal is to have a single deployment server overall. Otherwise I would have a deployment server on a per-site basis. The goal with the first deployment server is to to tell the secondary deployment server how to handle the forwarders or indexers.
So let's assume I've already got the systems talking, as I've already figured out that piece. Now how can I have a configuration deploy from the first to second deployment server, and then to the forwarder (and if possible, any configurations to the indexer, such as a change in a transform)?
-----------------------
| Deployment_Server_1 |
-----------------------
|
|
|
-----------------------
| Indexer |
| Deployment_Server_2 |
-----------------------
|
|
|
-----------------------
| Forwarder (UF) |
-----------------------
Systems are already communicating,
and show in list deploy-clients
Server classes are already made:
Linux
Windows
App-1-Windows
App-1-Linux
App-2-Windows
Any assistance in this matter would be greatly appreciated!
... View more