Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save sworisbreathing/d236895568eaf31da579 to your computer and use it in GitHub Desktop.
Save sworisbreathing/d236895568eaf31da579 to your computer and use it in GitHub Desktop.
Splunk Tiered Deployment Server
[deployment-client]
clientName = SecondaryDeploymentServer
reloadDSOnAppInstall = true
[target-broker:PrimaryDeploymentServer]
targetUri = <deployment_master_fqdn>:<deployment_master_mgmt_port>
###########################################################
# Secondary deployment servers - Deployment Apps
###########################################################
[serverClass:secondaryDeploymentServersDeploymentApps]
targetRepositoryLocation = $SPLUNK_HOME/etc/deployment-apps
whitelist.0 = *SecondaryDeploymentServer*
stateOnClient = noop
[serverClass:secondaryDeploymentServersDeploymentApps:app:TA-sos_win]
[serverClass:secondaryDeploymentServersDeploymentApps:app:TA-sos]
###########################################################
# Secondary deployment servers - Self-Deployed Apps
###########################################################
[serverClass:secondaryDeploymentServers]
whitelist.0 = *SecondaryDeploymentServer*
[serverClass:secondaryDeploymentServers:app:foo]
restartSplunkd = true
###########################################################
# Linux/Unix Splunk Instances
# (note: this is probably not a comprehensive list)
###########################################################
[serverClass:NixHosts]
whitelist.0 = *
machineTypesFilter = linux-*, freebsd-*, darwin-*, sunos-*, aix-*
[serverClass:NixHosts:app:TA-sos]
restartSplunkd = true
###########################################################
# Windows Splunk Instances
###########################################################
[serverClass:WindowsHosts]
whitelist.0 = *
machineTypesFilter = windows-*
[serverClass:NixHosts:app:TA-sos_win]
restartSplunkd = true
###########################################################
# Linux/Unix Splunk Instances
# (note: this is probably not a comprehensive list)
###########################################################
[serverClass:NixHosts]
whitelist.0 = *
machineTypesFilter = linux-*, freebsd-*, darwin-*, sunos-*, aix-*
[serverClass:NixHosts:app:TA-sos]
restartSplunkd = true
###########################################################
# Windows Splunk Instances
###########################################################
[serverClass:WindowsHosts]
whitelist.0 = *
machineTypesFilter = windows-*
[serverClass:NixHosts:app:TA-sos_win]
restartSplunkd = true
@sworisbreathing
Copy link
Author

Splunk Tiered Deployment Example Configuration

This set of configuration files shows how to roll out a tiered strategy for your Splunk
deployment servers. In this example, we have:

  • 1 primary deployment server
  • 1 or more secondary deployment servers
  • an arbitrary number of Splunk instances acting as deployment clients to the primary
    and secondary deployment servers

The Primary Deployment Server

The primary deployment server serves as the main app repository. In this example, it has:

In $SPLUNK_HOME/etc/deployment-apps:

  • foo (an arbitrary app)
  • TA-sos (the technology add-on for Splunk On Splunk on *Nix hosts)
  • TA-sos_win (the technology add-on for Splunk on Splunk on Windows hosts)

The Secondary Deployment Server

The secondary deployment server downloads its apps from the primary deployment server.
In this example, it will end up with the following:

In $SPLUNK_HOME/etc/apps:

  • foo (an abritrary app)
  • TA-sos or TA-sos_win (depending on the OS)

In $SPLUNK_HOME/etc/deployment-apps:

  • TA-sos
  • TA-sos_win

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment