Configuration distribution
As we have covered in some depth, configurations in Splunk are simply directories of plain text files. Distribution essentially consists of copying these configurations to the appropriate machines and restarting the instances. You can either use your own system for distribution, such as puppet or simply a set of scripts, or use the deployment server included with Splunk.
Using your own deployment system
The advantage of using your own system is that you already know how to use it.
Assuming that you have normalized your apps as described in the section Using apps to organize configuration, deploying apps to a forwarder or indexer consists of the following steps:
- Set aside the existing apps at $SPLUNK_HOME/etc/apps/.
- Copy the ...
Get Implementing Splunk - Second Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
