Download topic as PDF
Install Splunk Add-on for Windows on your forwarder
Use the following task to install the Splunk Add-on for Windows on your forwarder.
Install an add-on on to your forwarders using a deployment server
Use your deployment server to distribute content and configurations (collectively called deployment apps) to deployment clients, grouped into server classes. Deployment apps can be full-fledged apps, such as those available on Splunkbase, or they can be just simple groups of configurations.
Deploy an add-on to your deployment clients
- On your deployment server, navigate to
$SPLUNK_HOME/etc/deployment-apps/. - Add your add-on to the
/deployment-apps/directory. - Extract the add-on.
- Navigate to
$SPLUNK_HOME/etc/deployment-apps/<APP NAME>/default/inputs.conf. - Add inputs for the data you want to collect.
- Save your changes.
- Restart the deployment server:
/splunk restart.
View app deployment status
Go to the Apps tab. The tab provides information on the number of clients each app was deployed to. Click on an app to go to a detailed page for that app. The App Data Size field specifies the size of the app bundle. The bundle is a compressed file containing the app. Once a client receives a bundle, it uncompresses it and installs the app in its proper location.
|
PREVIOUS Install the Splunk universal forwarder |
NEXT Install the Splunk Add-on for Windows on your Splunk Cloud instance |
This documentation applies to the following versions of Splunk® Enterprise: 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10
Feedback submitted, thanks!