Is there an install option for the Windows Universal Forwarder to configure the deployment server when using the /quiet switch? Not seeing it in the install guide.
There is. Unfortunately, the install docs look like they're out-of-date with respect to the flags, but the current flags are documented here:
http://docs.splunk.com/Documentation/Splunk/4.2.3/Deploy/DeployaWindowsdfviathecommandline
Basically, you can add the flag DEPLOYMENT_SERVER=mydeploymentsvr:8089
or whatever to the command line. I personally still prefer to do it via config files, but the flag probably is good enough for almost all cases.
I created a transform with Orca to configure the deployment server and "AGREE_TO_LICENSE"
If you are familiar with orca (or likely if you are not, but are clever) you should be able to make one to fit your environment as well.
There is. Unfortunately, the install docs look like they're out-of-date with respect to the flags, but the current flags are documented here:
http://docs.splunk.com/Documentation/Splunk/4.2.3/Deploy/DeployaWindowsdfviathecommandline
Basically, you can add the flag DEPLOYMENT_SERVER=mydeploymentsvr:8089
or whatever to the command line. I personally still prefer to do it via config files, but the flag probably is good enough for almost all cases.
The docs have been updated.
Thanks, I'll check with piebob about including on the install doc. Yea i typically prefer to manipulate the configs directly. Bit for this would prefer to have it install with a single command.
I have done it this way to 300+ servers, and to my knowledge there is no flag to set the deployment server on install it still has to be done manually.
You can use the command "Splunk list forward-server to see which server its talking to and if you have multiple indexers defined then you should see all of them listed.
Hope this helps.
Kevin
That's how I've been handling on the unix side, but my deployment/configuration tool isn't installed on Windows, so trying to have the install as simple/compact as possible.