
Then untar the app in the deployment server special folder deployment-apps Make sure that you already have a license to enable the deployment server.Īnd make sure that your forwarders are all deployment-clients of this instance. If you want to use a splunk deployment server : $SPLUNK_HOME\etc\apps\100_mydeploymentname_splunkcloud with the default folder inside Untar the 100_mydeploymentname_splunkcloud.spl and push it to your forwarders in the apps folder If you want to use a third party deployment tool (chef, etc.) If you are using the default credentials, the user is "admin", the password "changeme"

Splunk app install "path\to\100_mydeploymentname_splunkcloud.spl" Go to the splunk folder in the bin folder If you are doing the install on the command line, use the splunk app install command with splunk running. Otherwise, check for your local/nf, and remove the ones that were populates in the local folders.

(a default folder, a readme, maybe a cert folder in older versions) The file is a SPL file 100_mydeploymentname_splunkcloud.splīut if you want to rename it tar.gz you can untar it and check the content.

install a forwarder on your server (linux or windows), and start it.
#SETTING UP SPLUNK FORWARDER HOW TO#
Here is an example of how to setup the credentials to send data to your Splunkcloud deployment
