Scenario
Upgraded from Splunk 4 to Splunk 6. Using deployment server to distribute apps
There are a large number of clients The target clients are placed in groups by setting common clientNames in deploymentclient.conf eg clientName=womble
In serverclass.conf the class is defined :-
[serverClass:wombles]
[serverClass:wombles:app:myapp]
whitelist.0 = womble
restartSplunkd = true
continueMatching = false
This used to deploy on Splunk v4 but does not on Splunk v6.0
If this is added:
[global]
whitelist.0 = *
The app is deployed to everything, not just the intended nodes
I believe the above config is not compatible with the forwarder management GUI - but should still work
If I move the whitelist to serverClass level it works Any ideas?