If I whitelist a serverclass, will any server that is added to the deployment server get added, or only servers that specifically request to get added?

[a212830]

Hi,

I'm trying to get the size of a serverclasses whitelist using the command below, but it's failing. Not sure what I'm doing wrong - hoping someone can point me in the right direction...

curl -k -u admin:pass  https://myhost:8089/services/deployment/server/serverclasses/whitelist-size -d fmrapp_all_c2c_cheflogs_clientlog_fwd
<?xml version="1.0" encoding="UTF-8"?>
<response>
  <messages>
    <msg type="ERROR">
 In handler 'serverclasses': bundle=serverclass stanza=serverClass:whitelist-size Missing, cannot edit or remove</msg>
  </messages>
</response>

We are making a chef recipe available to our customers and want to make this as automated and hands-off (for us, anyway) as possible. If I whitelist a serverclass, will any server that is added to the deployment server get added to that serverclass, or only servers that specifically request to get added to that serverclass get added?

Hope this makes sense.

TIA...

[sloshburch]

I might be reading this too fast: Are you looking to get the size of the class or something else? When you say "whitelist a serverclass" are you talking about the filterType or are you talking about the hosts you add to a white/black list?

[maciep]

I'm not sure if this is what you're looking for, but it seems like the whitelist filter will not include servers by default. They have to be specified in whitelist entry. But the blacklist filter would blacklist by default.

http://docs.splunk.com/Documentation/Splunk/latest/admin/Serverclassconf

filterType = whitelist | blacklist
* The whitelist setting indicates a filtering strategy that pulls in a
  subset:
    * Items are not considered to match the stanza by default.
    * Items that match any whitelist entry, and do not match any blacklist
      entry are considered to match the stanza.
    * Items that match any blacklist entry are not considered to match the
      stanza, regardless of whitelist.

[a212830]

Thanks. I'll read that again. Still not having any luck with the whitelist-size though...