Getting Data In

What happened if universal forwarder is pointed to a new Deployment server?

AlesFrohlich
Explorer

Hello,

Situation:
- Universal forwarder pointed to a temp Deployment server
- Two applications are deployed on the Universal Forwarder from the temp Deployment server

What happened with the two applications if I change Universal Forwarder deployment server configuration and point it to a new Deployment server? The new Deployment server is a fresh server with no applications defined and it is intended.
- Will the applications be deleted by Universal Forwarder?
- Will the applications remain and will be not managed?

Thank you in advance for any reply.

Best Regards,
Ales

0 Karma
1 Solution

adonio
Ultra Champion

Hello AlesFrohlich,
to your questions:
Will the applications be deleted by Universal Forwarder? Yes
- Will the applications remain and will be not managed? No
there are many answers here on how to migrate a deployment server
remember that in order to have apps on your client, you must have them joined to a serverclass (matches apps to clients) no server class = no apps on client even if the apps are on the new Deployment Server
hope it helps

View solution in original post

0 Karma

adonio
Ultra Champion

Hello AlesFrohlich,
to your questions:
Will the applications be deleted by Universal Forwarder? Yes
- Will the applications remain and will be not managed? No
there are many answers here on how to migrate a deployment server
remember that in order to have apps on your client, you must have them joined to a serverclass (matches apps to clients) no server class = no apps on client even if the apps are on the new Deployment Server
hope it helps

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...