splunk 部署服务器

splunk 部署服务器

#1. 在转发器添加部署服务器

/opt/splunk/bin/splunk set deploy-poll 192.168.0.36:8089

 

#2. 配置部署服务

准备配置文件，/opt/splunk/etc/system/local 创建serverclass.conf

参考URL:

https://docs.splunk.com/Documentation/Splunk/7.3.0/Admin/Serverclassconf

文件放置在以下目录

mkdir -p $SPLUNK_HOME/etc/deployment-apps/middle_forwarder/default

mkdir -p /opt/splunk/etc/deployment-apps/middle_forwarder/default

mkdir -p /opt/splunk/etc/deployment-apps/middle_forwarder/local

mkdir -p /opt/splunk/etc/deployment-apps/middle_forwarder/metadata

 

chown -R splunk /opt/splunk/etc/deployment-apps/

chgrp -R splunk /opt/splunk/etc/deployment-apps/

vi indexes.conf

#3. 重新加载

/opt/splunk/bin/splunk reload deploy-server

posted on 2019-07-16 10:16 minilabs 阅读( ...) 评论( ...) 编辑 收藏

转载于:https://www.cnblogs.com/lanshiyun/p/11193200.html