If you don’t know much about a RESTful API, these seem like perfectly logical questions. How does Splunk handle two such requests occurring at the same time? Perhaps an error message be produced? Is there a file lock that we need to be aware of?.Is there a way to append a whitelist entry to an existing server class? It appears that the endpoint (deployment/server/serverclasses/) is restricted only to replacing all entries.Now the reason I wrote this post was because RESTful APIs may not behave like you expect if you are used to writing scripts against a system with a non-RESTful API. Here are the two questions which were asked on that internal list today: This can definitely be done using the REST API. Especially as your environment grows, you will want to automate every Splunk administration task that you can, and that includes updating server classes, of course. A very important use of our REST APIs (and our higher level SDKs for a half-dozen different computer languages) is to integrate with these other systems and tools in your environment. So far, this is basic Splunk admin and has nothing to do with REST APIs. Splunk is nothing without the large systems around it which create data. But how do you indicate which managed nodes (any system running a forwarder) is to receive the correct configuration according to their roles? The answer is by using server class filters, such as whitelists and blacklists. One way to do this is to use our Deployment Server feature, which uses a pull model to ensure that all forwarders check in periodically to a DS to receive updated config files. Automation is important, so you want to ensure that the configuration on these forwarders is consistent. You have a typical Splunk environment with a bunch of servers with forwarders installed on each one which grabs data and sends it to the indexers. If one person has this question, there’s a good chance that someone else does as well! I saw an interesting thread today on an internal list that I would like to share with the world. After all, while each of us is a precious snowflake, our problems and challenges are not always unique.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |