product
- Why choose Splunk
- Installation record
- price
- Splunk Enterprise Security
- Splunk Phantom (SOAR)
- Splunk ITSI (Next Generation IT Operations)
- Splunk Observability Cloud
- Splunk UBA
- Macnica CSIRT App Basic
- App for Splunk for Financial Institutions
- Splunk Analytics for Hadoop
- About Apps
- Splunk Edge Hub
- What is Splunk
service
- Dashboard/SPL Creation Pack [Implementation/Building Support]
- Version upgrade service [implementation and construction support]
- Smart Security Monitoring App [Original App/Service]
- Splunk × LANSCOPE Original App [Original App/Service]
- Security Monitoring App for Box [Original App/Service]
- Cloud Security Monitoring App [Original App/Service]
- List of services
- Macnica Premium Support for Splunk (utilization support, version upgrade monitoring)
- Macnica Premium Support for Splunk Skill Up Package
Specifications/Technical Information
Application for evaluation machine
- FAQ
How to enable/disable deployment server and client features
- release date
- 2017-10-23
- last updated
- 2023-12-11
- version
- Splunk Enterprise 9.0.0
Splunk Universal Forwarder 9.0.0
- Overview
- How to enable/disable the Deployment Server and Deployment Client features
- Reference information
- content
-
How to set and check how to enable/disable the deployment server function
How to enable/disable
- activation
Execute the following command in the CLI of the deployment server.
$SPLUNK_HOME/bin/splunk enable deploy-server - Invalidation
Execute the following command in the CLI of the deployment server.
$SPLUNK_HOME/bin/splunk disable deploy-server
$SPLUNK_HOME is the installation directory. By default, it is:
Linux: /opt/splunk
Windows: C:\Program Files\Splunk*If you disable the function, there is no need to restart the Splunk service.
How to check whether a feature is enabled or disabled
When you execute the above enable/disable command, the setting value will change as follows. You can check whether the setting is enabled or disabled from the configuration file.
<Setting file>
$SPLUNK_HOME/etc/system/local/serverclass.conf
<Setting example>
[global]
disabled = trueThe deployment server function is disabled when disable=true or 1, and enabled when false or 0.
How to set and check how to enable/disable the deployment client function
How to enable/disable
- activation
Execute the following command on the CLI of the deployment client.
$SPLUNK_HOME/bin/splunk enable deploy-client - Invalidation
Execute the following command on the CLI of the deployment client.
$SPLUNK_HOME/bin/splunk disable deploy-client
*$SPLUNK_HOME is the installation directory. By default it is as follows.
(For Universal Forwarder)
Linux: /opt/splunkforwarder
Windows: C:\Program Files\SplunkUniversalForwarder(Heavy Forwarder)
Linux: /opt/splunk
Windows: C:\Program Files\SplunkIf you enable or disable the feature with the above command, you must restart the Splunk service for the settings to take effect.
How to check whether a feature is enabled or disabled
When you execute the above enable/disable command, the setting value will change as follows. You can check whether the setting is enabled or disabled from the configuration file.
<Setting file>
$SPLUNK_HOME/etc/system/local/deploymentclient.conf
<Setting example>
[deployment-client]
disabled = trueThe deployment client feature is disabled when disabled=true or 1, and enabled when false or 0.
that's all
- activation
In charge of Macnica Splunk Co., Ltd.
- TEL:045-476-2010
- E-mail:splunk-sales@macnica.co.jp
Weekdays: 9:00-17:00