Can we install a forwarder on the target machine from the deployment server.
Is deployment server is only used to manage splunk instances and send update to these instances ?
If you install universal forwarders on all your endpoints, as vanilla configuration just pointing back to your central server, you can then add a data input from the server and get it to start pushing logs up to central server.
krishnacasso,
The deployment server is for managing Splunk configurations, not the install itself. There are some examples of install scripts in the documentation that can get a UF installed and talking to a deployment server:
* nix: http://docs.splunk.com/Documentation/Forwarder/6.4.2/Forwarder/Installanixuniversalforwarderremotely...
* Windows: http://docs.splunk.com/Documentation/Forwarder/6.4.2/Forwarder/InstallaWindowsuniversalforwarderremo...