Deployment Architecture

deplyment server

krishnacasso
Path Finder

Can we install a forwarder on the target machine from the deployment server.
Is deployment server is only used to manage splunk instances and send update to these instances ?

Tags (1)
0 Karma

jlvix1
Communicator

If you install universal forwarders on all your endpoints, as vanilla configuration just pointing back to your central server, you can then add a data input from the server and get it to start pushing logs up to central server.

0 Karma

beatus
Communicator

krishnacasso,
The deployment server is for managing Splunk configurations, not the install itself. There are some examples of install scripts in the documentation that can get a UF installed and talking to a deployment server:
* nix: http://docs.splunk.com/Documentation/Forwarder/6.4.2/Forwarder/Installanixuniversalforwarderremotely...
* Windows: http://docs.splunk.com/Documentation/Forwarder/6.4.2/Forwarder/InstallaWindowsuniversalforwarderremo...

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...