If you are using the Splunk deployment server, this is the time to set up deploymentclient.conf. This can be accomplished in several ways, as follows:
- On the command line, by running the following code:
$SPLUNK_HOME/bin/splunk set deploy-poll deployment_server_name:8089
- By placing a deploymentclient.conf in:
$SPLUNK_HOME/etc/system/local/
- By placing an app containing deploymentclient.conf in:
$SPLUNK_HOME/etc/apps/
The third option is what I would recommend because it allows overriding this configuration, via a deployment server, at a later time. We will work through an example later in the Using Splunk deployment server section.
If you are deploying configurations in some other way, for instance with puppet, ...