Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Splunk 6 Forwarder Management Question

$
0
0

Scenario

Upgraded from Splunk 4 to Splunk 6. Using deployment server to distribute apps

There are a large number of clients The target clients are placed in groups by setting common clientNames in deploymentclient.conf eg clientName=womble

In serverclass.conf the class is defined :-

[serverClass:wombles]

[serverClass:wombles:app:myapp]
whitelist.0 = womble
restartSplunkd = true
continueMatching = false

This used to deploy on Splunk v4 but does not on Splunk v6.0

If this is added:

[global]
whitelist.0 = *

The app is deployed to everything, not just the intended nodes

I believe the above config is not compatible with the forwarder management GUI - but should still work

If I move the whitelist to serverClass level it works Any ideas?


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>