Hi All,
New to this, but getting on ok. I'm just a little confused about new client PCs or Servers being added to a server class.
What we have done so far...
All running on MS server 2008 r2 or Windows 7
'Splunk Enterprise server' v6.2.2 build and set to receive, server class setup with clients added, reporting as expected from the initially added clients.
'Splunk Universal Forwarder' v6.2.4 installed and reporting as mentioned above, we are filtering the events successfully (not relevant but want to give a full picture).
My question is, when we first set up a 'server class', we were able to add all the found clients. This worked all ok. We are rolling out the 'Universal Forwarder' with SCCM and now have more clients that are being seen by the 'Splunk Enterprise Server'. When you go into 'Forwarder manager', Server Classes tab, we select our server class that we created by the name displayed. In there, you see you see the clients. If we right click on the edit button/edit clients, we can see clients that are not members (e.g. not ticked) of the server class, but there seems to be no way of adding these clients.
Can you add clients? if so how?
Many thanks for reading and you help
... View more