Deployment Architecture

Sending updates to conf file using deployment server

ajaysamantbms
Explorer

Is it possible to update only one stanza of a conf file (e.g inputs.conf) and not touch other parts of configuration.

What i understand is when i push the conf file through deployment server, entire file will get replaced with the new file from the server..

Tags (1)
0 Karma
1 Solution

aholzer
Motivator

You are correct, it will replace the entire file. For that matter it will in fact replace the entire app. If you have appA on your deployserver, and it only contains inputs.conf, and your forwarder has appA that contains inputs.conf and outputs.conf. Once your deployserver sends the update, your appA will not have the outputs.conf.

What you should do is make a copy of the app onto your deployserver, make the necessary changes on your deployserver, and from now on only ever make changes on the deploysever.

Hope this helps.

View solution in original post

aholzer
Motivator

You are correct, it will replace the entire file. For that matter it will in fact replace the entire app. If you have appA on your deployserver, and it only contains inputs.conf, and your forwarder has appA that contains inputs.conf and outputs.conf. Once your deployserver sends the update, your appA will not have the outputs.conf.

What you should do is make a copy of the app onto your deployserver, make the necessary changes on your deployserver, and from now on only ever make changes on the deploysever.

Hope this helps.

Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...