Hello,
When i configure serverclass.conf (Windows based) , i got an error below:
targetRepositoryLocation=$SPLUNK_HOME\etc\apps [error of typos]
I don't know why although trying another case $SPLUNK_HOME/etc/apps
Second, when i have already installed UF and made it get apps from one deployment server. Is it possible to modify its inputs.conf in system/local so that some properies dont follow its deployment server's configuration ?
Third, how to use clientName ? i specified clientName for one UF to test01, and made whitelist.0=test* in serverclass.conf. But after restart deployment server and UF. The indexer (same place as deploymnet server) cannot recognize and no data being received. Do you have an example of using clientName ?
Hi,
Can you post the full error?
You can override any property for any stanza by adding the stanza and properties you want to override in the system/local/inputs.conf. system/local has the highest precedence.
Can you post the full configuration from the client and the deployment server for your last query?
Thanks!
Hi,
Can you post the full error?
You can override any property for any stanza by adding the stanza and properties you want to override in the system/local/inputs.conf. system/local has the highest precedence.
Can you post the full configuration from the client and the deployment server for your last query?
Thanks!
Yes, it's here: serverclass.conf
[global]
whitelist.0=*
[serverClass:clientManage]
repositoryLocation=$SPLUNK_HOME/etc/deployment-apps
filterType = blacklist
repositoryLocation = C:\Program Files\Splunk\etc\deployment-apps
whitelist.0 = client*
[serverClass:clientManage:app:inputTest]
repositoryLocation=$SPLUNK_HOME/etc/deployment-apps
stateOnClient=enabled
restartSplunkd=true
Iam in Windows based machine, and i have already set SPLUNK_HOME in system variable. but i dont know why i got the typos of that line containing "repositoryLocation". Can you suggest me a correct path ?