The advantage of using your own system is that you already know how to use it.
Assuming that you have normalized your apps, as described in the section Using apps to organize configuration, deploying apps to a forwarder or indexer consists of the following steps:
- Set aside the existing apps at $SPLUNK_HOME/etc/apps/.
- Copy the apps into $SPLUNK_HOME/etc/apps/.
- Restart Splunk forwarder. Note that this needs to be done as the user that is running Splunk, either by calling the service script or calling su. In Windows, restart the splunkd service.
Assuming that you already have a system for managing configurations, that's it.
If you are deploying configurations to indexers, be sure to only deploy the configurations ...
