topic Re: Splunk 9.3 deployment server page in Splunk Enterprise

Splunk 9.3 deployment server page

tlmayes — Tue, 13 Aug 2024 13:47:45 GMT

We were running Splunk Enterprise v9.2 on our Deployment Server. Everything worked fine.... Upgraded to v9.3.0, now the path "https://<fqhn>/en-US/manager/system/deploymentserver" no longer renders.

Tried on 3 computers using several different browsers. All return a blank white screen on this URL only. All other dashboards on this host work fine, it is only the "Forwarder Manager" link.

Nothing in the logs other than INFO events, and nothing to indicate a problem. Any ideas what is going on?

Re: Splunk 9.3 deployment server page

SanjayReddy — Mon, 02 Sep 2024 18:33:56 GMT

Hi @tlmayes

seems there is know in issue on latest version for Splunk 9.2 and after.

can you follow this link and try fixit
https://docs.splunk.com/Documentation/Splunk/9.3.0/Updating/Upgradepre-9.2deploymentservers

Possible issues with upgrade

Data not appearing in forwarder management UI following upgrade

This problem can occur if your deployment server forwards its data to a standalone indexer or to the peer nodes of an indexer cluster. To rectify, add these settings to outputs.conf on the deployment server:

[indexAndForward]
index = true
selectiveIndexing = true

If you add these settings post-upgrade, you might need to restart the deployment server.

Re: Splunk 9.3 deployment server page

tlmayes — Tue, 03 Sep 2024 00:34:36 GMT

Thanks... but already tried that. This was an upgrade from 9.2 to 9.3 so shouldn't have been necessary, but tried it anyway. No affect. Splunk support has been working on this for 3 weeks now. Only having the problem on 1 of 4 Deployment Servers

Re: Splunk 9.3 deployment server page

thebeno — Mon, 13 Jan 2025 21:53:32 GMT

Hi
more changes needs to be done to fix wrong installation.

In file $SPLUNK_HOME/etc/system/local/outputs.conf

original wrong is: