I have the Splunk App for Unix and Linux set up to deploy from my deployment server and I have been able to successfully deploy it to existing servers that I have in my environment - but all of those servers are running full fledged Splunk. I just installed a universal forwarder on a Linux server and I'm able to successfully see internal data being forwarded from that, and I tried adding this server into my serverclass.conf on my deployment server to try to push the unix app to it, but it is not deploying and I don't see anything in the logs that would indicate why. Does anyone know what I'm missing? Can you deploy from a deployment server to a universal forwarder instance?
↧
Can you deploy the Splunk App for Unix and Linux from a deployment server to a universal forwarder?
↧