Not a helpful answer, but the answer keeps changing. At times, Splunk allows you to use their free 30 day trial on the entire infrastructure and I believe at other times it has not allowed it. I know the home 250 mb license won't let you, the dev license that you can apply for, does allow it. You'll just get have to build two instances and see if they can use the same license. You'll be notified in messages if it doesn't work.
Thanks. Quick question. Your method of file transfer was effective. Wouldn’t it be more appropriate to use the deployment server to transfer files. Although it might have taken longer.
Great question. I could have done this and maybe it would have been even faster. It definitely would have been best practice. But I didn't do it bc I still needed an app that declared my deployment server to be pushed to each new splunk box, or I'd have had tu ssh into the box and run the cli command to join them to the deployment server. I'd also have needed to create the serverclass.conf settings in code to have each machine automatically pull the right apps which means my code now needs to know the host name or ip address of each splunk instance, or I do it by hand. Maybe it would have been faster, but probably not. That being said, the right way to do it is with the deployment server. Sshing apps to each box is a best practice, but to keep this as fast as possible, I did it this way.
I wanted to express my sincere gratitude for the informative TH-cam videos you created. I truly appreciate the effort you put into each video. Thanks
Glad it was helpful! Let me know if there are any topics you would like to see covered.
can you install all of this even without enterprise license? even just a trial license?
Not a helpful answer, but the answer keeps changing. At times, Splunk allows you to use their free 30 day trial on the entire infrastructure and I believe at other times it has not allowed it. I know the home 250 mb license won't let you, the dev license that you can apply for, does allow it. You'll just get have to build two instances and see if they can use the same license. You'll be notified in messages if it doesn't work.
Thanks. Quick question. Your method of file transfer was effective. Wouldn’t it be more appropriate to use the deployment server to transfer files. Although it might have taken longer.
Great question. I could have done this and maybe it would have been even faster. It definitely would have been best practice. But I didn't do it bc I still needed an app that declared my deployment server to be pushed to each new splunk box, or I'd have had tu ssh into the box and run the cli command to join them to the deployment server. I'd also have needed to create the serverclass.conf settings in code to have each machine automatically pull the right apps which means my code now needs to know the host name or ip address of each splunk instance, or I do it by hand.
Maybe it would have been faster, but probably not. That being said, the right way to do it is with the deployment server. Sshing apps to each box is a best practice, but to keep this as fast as possible, I did it this way.
Sshing is NOT a best practice. Sorry about that above.
Awesome and informational video. Thanks man. I needed this. However, can you do a vid for a S1 (Single Server Deployment) on Server 2019?
Let me know if this covers what you need or if you want me to elaborate on a particular section.
th-cam.com/video/mtrJpfPNsqk/w-d-xo.html