Hi Team, I am having a cluster setup with the following architecture. 1) One Splunk Manager. 2) One Search Head 3) Two Peer nodes (i.e Two Indexers) 4) Total 50 Linux and Windows Forwarder servers. I am trying to setup a deployment server in one of the indexer nodes. Could someone please let us know, whether we can use one of indexer node as deployment server or we need to have a dedicated server. My requirement is to maintain all of the forwarders inputs.conf and outputs.conf from the deployment server. I have gone through below URLS. Could some one suggest and provide me the actual steps for configuring deployment server and also configuration steps need to be performed at forwarders end. 1)http://docs.splunk.com/Documentation/Splunk/6.0.2/Updating/Planadeployment 2)http://answers.splunk.com/answers/12384/hardware-requirements-for-deployment-server-in-large-deployment 3)http://docs.splunk.com/Documentation/Splunk/6.0.2/Updating/Calculatedeploymentserverperformance Regards, Pradeep. ... View more

Hi Team, Could some one please let us know, whether there is any command line option to edit the following options in outputs.conf. [tcpout:project_example] server = 192.168.10.1:8888, 192.168.10.2:8886 useACK=true Regards, Pradeep. ... View more