Deployment Architecture

Distributing inputs.conf with deployment server

damucka
Builder

Hello,

I would like to distribute and make changes to the inputs.conf files of the universal forwarders using deployment server.
So far I have created a new directory in the /etc/deployment-apps:

MLBSO_HANA_inputs

and created an inputs.conf in the default sub-folder of it. After configuring things in the Settings -> forwarder Management my "App" and the corresponding inputs.conf has been distributed, all fine.
But now I want to make changes to this inputs.conf, hoping it will also reach the forwarder, this is however not the case. The connection between forwarder and the deployment server is fine.
Do I miss-understand the concept of the pushing changes? Should that not be automatic?

Kind Regards,
Kamil

Tags (1)
0 Karma
1 Solution

Vijeta
Influencer

@damucka - try reloading the deploy server manually using command line.
$ /opt/splunk/bin/splunk reload deploy-server -class

View solution in original post

0 Karma

Vijeta
Influencer

@damucka - try reloading the deploy server manually using command line.
$ /opt/splunk/bin/splunk reload deploy-server -class

0 Karma

damucka
Builder

@Vijeta

Thank you, it worked.

Kind Regards,
Kamil

0 Karma

adonio
Ultra Champion

you have to modify the inputs.conf in your app on the deployment server under .../deployment-apps/
this is the app that is being pushed to all your forwarders

0 Karma

damucka
Builder

Hello @adonio

Thank you.
This is what I am doing, the path is:

~/etc/deployment-apps/MLBSO_HANA_inputs/default>

so, the MLBSO_HANA_inputs is under .../deployment-apps/. As mentioned, the first initial time it works, but then if I make the change to the inputs.conf inside the default directory, then it is not reflected on the forwarders.
Or do you mean that the inputs.conf should be placed really directly in the .../deployment-apps/ directory itself? But then where would it land on the forwarder? And most important, how would I distinguish between different inputs.conf files that I have to distribute to different forwarders? Now I have it under separate "apps" sub-folders of the ../deployment-apps/ folder.

Kind Regards,
Kamil

0 Karma
Get Updates on the Splunk Community!

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...