Deployment Architecture

Is there a way to get the deployment server to work with hostname aliases for serverclass entries?

a212830
Champion

Hi,

Our private cloud uses a standard naming convention that isn't very useful, and people use aliases to make the hosts meaningful. Is there a way to get the deployment server to recognize these aliases? I tried entering them in the serverclass, and they are just ignored.

MuS
SplunkTrust
SplunkTrust

nice - the docs say

 clientName = deploymentClient
 * Takes precedence over DNS names.

so this should work, but you should use deploymentclient.conf.

cheers, MuS

sloshburch
Splunk Employee
Splunk Employee

Converted this to the answer. You should use the clientName field to endow randomly assigned hostnames with a meaningful name. You can take this further by defining your own naming convention so your serverclass can have wildcard matching for sending classes based on the naming convention (and therefore based on the function or data points you need to collect).

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi a212830,

messy solution: add the aliases to /etc/hosts or the corresponding windows file.
clean solution: ask your network / DNS team to create CNAME's for the private cloud hosts and use them.

Hope this helps ...

cheers, MuS

0 Karma

a212830
Champion

The cname alias is created, but splunk does not recognize it in the deployment server. It takes the server name.

0 Karma

MuS
SplunkTrust
SplunkTrust

Ah now I understand your request....

I have no DNS available to modify host entries and test it, but my assumption is that Splunk uses A records or NAME records. If I recall it correct you could only overcome such a situation by using the messy solution on the deployment server........

0 Karma

a212830
Champion

Here was my work-around.. looking for a sanity review.

The install is done via a chef recipe, which also puts the deployment file structure down, and the regional outputs structure down. If an alias is requested as part of the serverclass install (to allow me to more easily segregate the hosts), then the chef recipe will create another directory structure, which will contain another deployment.conf, but only with this info:

[deployment-client]

Set the phoneHome at the end of the PS engagement

10 minutes

phoneHomeIntervalInSecs = 600

clientName = myalias

I did this manually and it seemed to work. Thoughts?

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...