All Apps and Add-ons

Multiple Bigfix Servers

BP9906
Builder

Any way to support multiple bigfix servers? We have 2 separate domains.

Thanks

Tags (1)
0 Karma
1 Solution

mw
Splunk Employee
Splunk Employee

Yes, this is actually one of the core purposes of the app. You would just put multiple stanzas into the bigfix.conf configuration file and it should just work.

Example:

# $SPLUNK_HOME/etc/apps/bigfix/local/bigfix.conf
#
[bigfix_config1]
url = http://webreports1
user = username
password = password
soap_timeout = 600

[bigfix_config2]
url = http://webreports2
user = username
password = password
soap_timeout = 600

View solution in original post

0 Karma

rajanala
Path Finder

Is the Splunk BigFix app installed on the Search Heads ONLY ?
What other options are available ?

0 Karma

mw
Splunk Employee
Splunk Employee

Yes, this is actually one of the core purposes of the app. You would just put multiple stanzas into the bigfix.conf configuration file and it should just work.

Example:

# $SPLUNK_HOME/etc/apps/bigfix/local/bigfix.conf
#
[bigfix_config1]
url = http://webreports1
user = username
password = password
soap_timeout = 600

[bigfix_config2]
url = http://webreports2
user = username
password = password
soap_timeout = 600
0 Karma

BP9906
Builder

Thanks. It worked. It didnt work at first oddly enough because the order of my parameters doesnt match yours. Soon as I copy pasted your example and edited accordingly, it all worked. Thanks again.

0 Karma

mw
Splunk Employee
Splunk Employee

Edited to include an example.

0 Karma

BP9906
Builder

can you give an example?

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...