Deployment Architecture

Is there a way to get the deployment server to work with hostname aliases for serverclass entries?

a212830
Champion

Hi,

Our private cloud uses a standard naming convention that isn't very useful, and people use aliases to make the hosts meaningful. Is there a way to get the deployment server to recognize these aliases? I tried entering them in the serverclass, and they are just ignored.

MuS
Legend

nice - the docs say

 clientName = deploymentClient
 * Takes precedence over DNS names.

so this should work, but you should use deploymentclient.conf.

cheers, MuS

sloshburch
Splunk Employee
Splunk Employee

Converted this to the answer. You should use the clientName field to endow randomly assigned hostnames with a meaningful name. You can take this further by defining your own naming convention so your serverclass can have wildcard matching for sending classes based on the naming convention (and therefore based on the function or data points you need to collect).

0 Karma

MuS
Legend

Hi a212830,

messy solution: add the aliases to /etc/hosts or the corresponding windows file.
clean solution: ask your network / DNS team to create CNAME's for the private cloud hosts and use them.

Hope this helps ...

cheers, MuS

0 Karma

a212830
Champion

The cname alias is created, but splunk does not recognize it in the deployment server. It takes the server name.

0 Karma

MuS
Legend

Ah now I understand your request....

I have no DNS available to modify host entries and test it, but my assumption is that Splunk uses A records or NAME records. If I recall it correct you could only overcome such a situation by using the messy solution on the deployment server........

0 Karma

a212830
Champion

Here was my work-around.. looking for a sanity review.

The install is done via a chef recipe, which also puts the deployment file structure down, and the regional outputs structure down. If an alias is requested as part of the serverclass install (to allow me to more easily segregate the hosts), then the chef recipe will create another directory structure, which will contain another deployment.conf, but only with this info:

[deployment-client]

Set the phoneHome at the end of the PS engagement

10 minutes

phoneHomeIntervalInSecs = 600

clientName = myalias

I did this manually and it seemed to work. Thoughts?

0 Karma
Get Updates on the Splunk Community!

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...