Which of the following describes a Splunk deployment server?

Question

Options

• AA Splunk Forwarder that deploys data to multiple indexers.
• BA Splunk app installed on a Splunk Enterprise server.
• CA Splunk Enterprise server that distributes apps.
• DA server that automates the deployment of Splunk Enterprise to remote servers.

• A
  2% (1)
• B
  5% (2)
• C
  91% (39)
• D
  2% (1)

Explanation

A Splunk deployment server is a system that distributes apps, configurations, and other assets to groups of Splunk Enterprise instances. You can use it to distribute updates to most types of Splunk Enterprise components: forwarders, non-clustered indexers, and search heads. A Splunk deployment server is available on every full Splunk Enterprise instance. To use it, you must activate it by placing at least one app into %SPLUNK_HOME%\etc\deployment-apps on the host you want to act as deployment server. A Splunk deployment server maintains the list of server classes and uses those server classes to determine what content to distribute to each client. A server class is a group of deployment clients that share one or more defined characteristics. A Splunk deployment client is a Splunk instance remotely configured by a deployment server. Deployment clients can be universal forwarders, heavy forwarders, indexers, or search heads. Each deployment client belongs to one or more server classes. A Splunk deployment app is a set of content (including configuration files) maintained on the deployment server and deployed as a unit to clients of a server class. A deployment app can be an existing Splunk Enterprise app or one developed solely to group some content for deployment purposes.

No community discussion yet for this question.