Adding a base configuration

If you are using the Splunk deployment server, this is the time to set up deploymentclient.conf. This can be accomplished in several ways, as follows:

  • On the command line, by running the following code:
$SPLUNK_HOME/bin/splunk set deploy-poll 
deployment_server_name:8089
  • By placing a deploymentclient.conf in:
$SPLUNK_HOME/etc/system/local/ 
  • By placing an app containing deploymentclient.conf in:
$SPLUNK_HOME/etc/apps/ 

The third option is what I would recommend because it allows overriding this configuration, via a deployment server, at a later time. We will work through an example later in the Using Splunk deployment server section.

If you are deploying configurations in some other way, for instance with puppet, ...

Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.