The Command Center • Room 2

serverclass.conf Deep Dive

serverclass.conf defines Server Classes — named groups of deployment clients matched by hostname, IP address, DNS name, or machine type.

Each server class has one or more apps associated with it. When a client matches the server class criteria, it receives all associated apps.

Key settings: whitelist/filterType for client matching, restartSplunkd to control whether forwarders restart after receiving updates, and repositoryLocation for where apps are stored on the DS.

serverclass.conf example

[serverClass:WebServers]
filterType = whitelist
whitelist.0 = web-*.company.com

[serverClass:WebServers:app:TA-apache]
restartSplunkd = true

Knowledge Check

Prove your understanding to clear the room (Rewards XP)

Complete the serverclass.conf to deploy a Windows add-on to all hosts starting with "win-":

[serverClass:]
filterType = whitelist
whitelist.0 =

[serverClass:WindowsHosts:app:]
restartSplunkd = true