Implementing Splunk 7, Third Edition - Third Edition

Adding a base configuration

If you are using the Splunk deployment server, this is the time to set up deploymentclient.conf. This can be accomplished in several ways, as follows:

• On the command line, by running the following code:

$SPLUNK_HOME/bin/splunk set deploy-poll 
deployment_server_name:8089

• By placing a deploymentclient.conf in:

$SPLUNK_HOME/etc/system/local/ 

• By placing an app containing deploymentclient.conf in:

$SPLUNK_HOME/etc/apps/ 

The third option is what I would recommend because it allows overriding this configuration, via a deployment server, at a later time. We will work through an example later in the Using Splunk deployment server section.

If you are deploying configurations in some other way, for instance with puppet, ...