Deployment Architecture

Is there a way to see what serverclass and apps a host is associated with?

a212830
Champion

Hi,

Is there a way (preferably via REST) to see what deploymentserver classes and apps a specific host is associated with? I know that you can go into the deploymentserver directly and get this info, but I'm trying to avoid that situation.

0 Karma

thomrs
Communicator

Yes there is, take a look at http://docs.splunk.com/Documentation/Splunk/6.1.2/RESTAPI/RESTdeploy#deployment.2Fserver.2Fclients

I don't use the REST directly, but the SDK's can help, I use the python one almost daily.

0 Karma

a212830
Champion

Thanks. I'm trying to run this from a centralized server, not the server where the forwarder is already running. It looks like if I try ../services/deployment/server/clients it lists all clients. I don't see any way to specify a specific forwarder. Does that exist?

0 Karma

thomrs
Communicator

You would run this against your deployment server.

   curl -k -u admin:pass https://<deliver server>:8089/services/deployment/server/clients

There will be multiple entries, each will have a s:key name="hostname", s:key name="wma-app-test2".

You'll also get the UUID of the server, as the title, and you can call /services/deployment/server/clients/ to get info about a single machine.

a212830
Champion

ok. Thanks. Obviously this is workable, but it's disappointing that you can't just pass a forwarder name.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...