Admin Manual

 


How Splunk Works

Configure deployment clients

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.

Configure deployment clients

At this point, you should have determined which server classes each client belongs to and which discovery method (polling or multicast) each will use.


You will now install Splunk on each client machine and configure it as a deployment client.


Enable the client and server

You can enable the client and server from Splunk's CLI. To use Splunk's CLI, navigate to the $SPLUNK_HOME/bin/ directory and use the ./splunk command. You can also add Splunk to your path and use the splunk command.


From the Splunk CLI, run the following command:


./splunk set deploy


This will enable the client module and allow it to communicate with the deployment server.



Polling method

If you decide to use the polling method, run the following command from the Splunk CLI on each client:


./splunk set deploy-poll x.x.x.x:pppp



Substitute the ip number and management port of the deployment server (the management port is typically 8089).


Multicast discovery method

If you decide to use multicast, run the following command from the Splunk CLI on each client:


./splunk set deploy-multicast x.x.x.x:pppp

Substitute the multicast group IP/Port.


Sync the server and client

Now you are read to sync the server with the clients.


Start the deployment server from its Splunk CLI:


./splunk start

Start the deployment clients from their Splunk CLIs. Use this command to start Splunk without a license prompt:


./splunk start --accept-license

At this point, every client will either pick up the multicast packet as sent out by the deployment server or will poll the deployment server. Each client will then determine that it does not have up to date configurations and will ask the deployment server for a bundle file for each server class that it is a member of. Once it receives these bundle files, it will restart itself using the new configurations it has now received.

This documentation applies to the following versions of Splunk: 3.0 , 3.0.1 , 3.0.2 , 3.1 , 3.1.1 , 3.1.2 , 3.1.3 , 3.1.4 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!