Implementing Splunk 7, Third Edition - Third Edition

Using the Splunk deployment server

If you do not have a system for managing configurations, you can use the deployment server included with Splunk.

Some advantages of the included deployment server are as follows:

• Everything you need is included in your Splunk installation
• It will restart forwarder instances properly when new app versions are deployed
• It is intelligent enough not to restart when unnecessary
• It will remove apps that should no longer be installed on a machine
• It will ignore apps that are not managed
• The logs for the deployment client and server are accessible in Splunk itself

Some disadvantages of the included deployment server are:

• As of Splunk 4.3, there are issues with scale beyond a few hundred deployment clients, at ...