Hello All, I would like to find out if the splunk deployment server be able to control all the UF's installed on the client machines? We have around 120 servers which we want to install the UF on and i was wondering if there is a method of controlling them from a central console instead of logging in and editing them manually everytime there is a change that have to be done on the server
You can use script for installation and configuration. Refer below:
https://docs.splunk.com/Documentation/Forwarder/7.0.2/Forwarder/Installanixuniversalforwarderremotel...
https://answers.splunk.com/answers/34896/simple-installation-script-for-universal-forwarder.html
You can use script for installation and configuration. Refer below:
https://docs.splunk.com/Documentation/Forwarder/7.0.2/Forwarder/Installanixuniversalforwarderremotel...
https://answers.splunk.com/answers/34896/simple-installation-script-for-universal-forwarder.html
That is very good to know. Now my second question is how do i roll out all the UF's to the clients machines? Is there a way to do it via splunk or manually logging into the server and then installing the software and then going to the settings and point the uf to the deployment server.
Yes, Deployment server can handle all configuration from itself and pushed to all forwarders. you can use forwarder management as UI in settings - > forwarder management. Refer this document:
https://docs.splunk.com/Documentation/Splunk/7.0.2/Updating/Howdeploymentupdateshappen
Hey ranjitbrhm1,
Yes Deployment server controls all UF's.
You can refer this doc:
http://docs.splunk.com/Documentation/Splunk/7.0.2/Updating/Configuredeploymentclients
Let me know if this helps!!