The Command Center • Room 3

🖥️ SPL Lab: Monitoring Deployment Server

Admins need to verify that deployment clients are checking in and receiving their apps. The _internal index contains deployment server activity logs.

You can search for deployment client phone-home events, app download status, and configuration reload results.

After updating serverclass.conf, run: ./splunk reload deploy-server to apply changes without restarting.

Knowledge Check

Prove your understanding to clear the room (Rewards XP)

Write a search that shows which deployment clients have phoned home recently, listing their hostname and last contact time.

Splunk Search Bar