Deployment Architecture

Splunk_TA_nix install from deployment server

rameshlpatel
Communicator

Hi,

I have 9 universal forwarders where i want to install Splunk_TA_nix from deployment server.

Please let me know is it possible to install from deployment server or i have to go one by one to forwarder to install

0 Karma

lukejadamec
Super Champion

Is the deployment server running on a windows system?
If so, you may have problems with permissions on the scripts, and windows vs unix formating of the text files.

You should install the TA on a unix box, and configure it on a unix box, then copy the configured app to the deployment server.

If the deployment server is a unix box, then you should have no problem.

0 Karma

lukejadamec
Super Champion

I see from your new question that you've done some research. The answer is yes. You place the configured TA_unix app on the deployment server in the deployment apps folder. Then you set up the serverclass.conf file on the deployment server. Then you restart the deployment server with the following command:

splunk reload deploy-server

All of the forwarders defined in the serverclass.conf file will check with the deployment server for apps specified in the serverclass.conf file.

The forwarders should already have a deploymentclient.conf file in splunk\etc\system\local.

0 Karma

rameshlpatel
Communicator

Yes my forwarders are setuped but how i will send TA to all forwarders, in that i need some help ?

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

And hopefully you have setup your forwarders to poll the deployment server?

0 Karma

lukejadamec
Super Champion

It should work fine then if the permissions are correct.

0 Karma

rameshlpatel
Communicator

My deployment server is on unix box.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...