Deployment Architecture

How to manage deployment clients?

hulahoop
Splunk Employee
Splunk Employee

In Splunk documentation, the communication model between deployment server and clients is described as

The deployment client periodically polls the deployment server, identifying itself.

How often does this polling occur? What if clients fail to check in? How do I identify clients which have not polled the deployment server? Is there an App for this?

1 Solution

Joffer
Path Finder

You can use splunk list deploy-clients to list the clients that have contacted the server.

The phone home interval is 30 seconds by default. It can be changed in $SPLUNK_HOME/etc/system/local/deploymentclient.conf by setting/changing the phoneHomeIntervalInSecs variable. My example below changes this to 1 minute (60 seconds)

#***************************************************************************
# Configure a Splunk deployment client.
# 
# Note: At a minimum the [deployment-client] stanza is required in
# deploymentclient.conf for deployment client to be enabled.
#***************************************************************************
[deployment-client]
disabled = false
serverEndpointPolicy = acceptAlways
phoneHomeIntervalInSecs = 60

#***************************************************************************
# The following stanza specifies deployment server connection information
#***************************************************************************
[target-broker:deploymentServer]
targetUri = splunk01.mydomain.loc:8089

View solution in original post

Joffer
Path Finder

You can use splunk list deploy-clients to list the clients that have contacted the server.

The phone home interval is 30 seconds by default. It can be changed in $SPLUNK_HOME/etc/system/local/deploymentclient.conf by setting/changing the phoneHomeIntervalInSecs variable. My example below changes this to 1 minute (60 seconds)

#***************************************************************************
# Configure a Splunk deployment client.
# 
# Note: At a minimum the [deployment-client] stanza is required in
# deploymentclient.conf for deployment client to be enabled.
#***************************************************************************
[deployment-client]
disabled = false
serverEndpointPolicy = acceptAlways
phoneHomeIntervalInSecs = 60

#***************************************************************************
# The following stanza specifies deployment server connection information
#***************************************************************************
[target-broker:deploymentServer]
targetUri = splunk01.mydomain.loc:8089

hulahoop
Splunk Employee
Splunk Employee

Awesome. Thank you, Joffer!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...