Example: deploy a light forwarder
Example: deploy a light forwarder
This example walks through the configuration needed to deploy an app, in this case, the Splunk light forwarder.
On the deployment server
Edit serverclass.conf in /system/local on the deployment server and add a server class named lightforwarders that includes the light forwarder app by name:
[global] whitelist.0=* [serverClass:lightforwarders] whitelist.0=* [serverClass:lightforwarders:app:SplunkLightForwarder] stateOnClient=enabled restartSplunkd=true
- The [global] stanza is required, and contains any settings that should be globally applied.
- The
whitelist.0specifies that all server classes defined in this configuration file are matched by all clients--in this case, just the lighforwarders server class. -
lightforwardersis the name we specified for the server class. You can call your server classes anything you want. -
stateOnClientspecifies that this app should be enabled on the client when it is deployed. -
restartSplunkdspecifies that when this app is deployed, splunkd should be restarted. - If you created a new
serverclass.confto add these definitions, you must restart Splunk for the settings to take effect.
On the deployment client
Edit deploymentclient.conf in /system/local on the deployment client to tell the client how to contact the deployment server:
[deployment-client] [target-broker:deploymentServer] targetUri=<IP:port>
which points this client at the deployment server at IP:port, where it will pick up the Splunk light forwarder app, enable it, and restart.
-
deploymentServeris the default name for a deployment server. - <IP:port> are the IP and port for the deployment server.
This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10 , 4.0.11 View the Article History for its revisions.