What action is required to enable forwarder management in Splunk Web?

What action is required to enable forwarder management in Splunk Web?
A . Navigate to Settings > Server Settings > General Settings, and set an App server port.
B . Navigate to Settings > Forwarding and receiving, and click on Enable Forwarding.
C . Create a server class and map it to a client in SPLUNK_HOME/etc/system/local/serverclass.conf.
D . Place an app in the SPLUNK_HOME/etc/deployment-apps directory of the deployment server.

Answer: C

Explanation:

Reference:

https://docs.splunk.com/Documentation/Splunk/8.2.1/Updating/Forwardermanagementoverview

https://docs.splunk.com/Documentation/MSApp/2.0.3/MSInfra/Setupadeploymentserver

"To activate deployment server, you must place at least one app into %SPLUNK_HOME%etcdeployment-apps on the host you want to act as deployment server. In this case, the app is the "send to indexer" app you created earlier, and the host is the indexer you set up initially.

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments