MENU

Fun & Interesting

Splunk Deployment Server Setup | Server Class and Deployment Apps

Thetips4you 17,587 lượt xem 5 years ago
Video Not Working? Fix It Now

#splunk #splunkforwarder #tutorial #splunk #splunkforwarder #tutorial Hello Guys, In our previous video on Splunk we have setup splunk server, and splunk forwarder. We will be configuring the splunk forwarder to connect to splunk server using deployment configuration.

See also my website: http://www.thetips4you.com

Check out my previous videos on splunk here.

Splunk Installation: https://youtu.be/np8jYDTfAEo

Splunk forwarder setup : https://youtu.be/c1t1QFTIGBg

Below are the complete commands and instructions.


Set the deployment server details in forwarder client

$SPLUNK_HOME/etc/system/local


Create a new file using : vi deploymentclient.conf

[deployment-client]

[target-broker:deploymentServer]

targetUri = 192.xxx.0.xx:8089

=========================================================


On deployment server

$SPLUNK_HOME/etc/deployment-apps

Create the apps

mkdir linuxfiles ( this will create the app in name linuxfiles). Create a folder local under linuxfiles
=========================================================

Create serverclass.conf


$SPLUNK_HOME/etc/system/local

[serverClass:linux_servers]

whitelist.0 = 192.xxx.0.xx #this is the forwarder IP



[serverClass:linux_servers:app:linuxfiles]

restartSplunkWeb = 0

restartSplunkd = 0

stateOnClient = enabled

--------------------------------------------------------------------------------------------------------------
Follow me @:
https://www.instagram.com/thetips4you
https://www.youtube.com/channel/UCoOq-DtESvayx5yJE5H6-qQ?
https://fb.me/thetipsforall
http://www.thetips4you.com
------------------------------------------------------------------------------------------------------------------

Note: Each word by Word or sentences used in this video is self written and converted to Audio to give explanation on the steps in each tutorial . These are not automated or third party content or scrapped from any website.

Comment