topic Re: Search Head Deployer error message in Deployment Architecture

Search Head Deployer error message

kmugglet — Sat, 06 Jun 2020 22:21:21 GMT

Has anyone seen this error before?

<?xml version="1.0" encoding="UTF-8"?>
<response>
  <messages>
    <msg type="ERROR">Error while deploying apps to first member, aborting apps deployment to all members: Error while updating app=test1 on target=https://xx.xx.xx.xx:8089: Non-200/201 status_code=400; {"messages":[{"type":"ERROR","text":"Argument \"deploy\" is not supported by this handler."}]}</msg>
  </messages>
</response>

Running from the deployer , target address is the current cluster captain

Splunk V7.3.5 deployer talking to V7.2.7 Search heads

Re: Search Head Deployer error message

kmugglet — Thu, 21 May 2020 04:37:57 GMT

This output was from a curl command to deploy.

I get the same error message body when using ./splunk apply shcluster-bundle -target=https://xx.xx.xx.xx:8089

Re: Search Head Deployer error message

richgalloway — Thu, 21 May 2020 13:15:57 GMT

Make sure the target is really a SHC member.

Re: Search Head Deployer error message

anthonymelita — Thu, 21 May 2020 22:43:15 GMT

I have not had this exact error, but similar ones. In my case I once had an empty app directory, and another case files with bad permissions.

p.s. I'm guessing this is just a mistake in your comment, but there should be space after target, not an equals symbol.

Re: Search Head Deployer error message

codebuilder — Thu, 21 May 2020 22:50:22 GMT

I second what @richgalloway recommended...

Re: Search Head Deployer error message

codebuilder — Thu, 21 May 2020 22:55:13 GMT

Oh wait, in my previous reply I agreed with @richgalloway , and still do, but after re-reading your post I noticed the delta in versions.

The hashing algorithm for pass4SymmKey's is different. Based on that, I think you need to re-enter the pass4SymmKey in plain text on the search heads. I'm guessing they are not recognizing the deployer as a valid member of the cluster because of the version difference.

Update the key, then cycle Splunk on the SHC members and try again.

Re: Search Head Deployer error message

kmugglet — Thu, 21 May 2020 23:04:53 GMT

Yeah, I think it was a version thing.
I downgraded to 7.2.7 and everything worked again properly.

Thanks for the info about the hashing algorithm, I'm building a new build for 7.3.5 so it "should" be all fresh and shiny and new and work like a charm straight out of the box ...........................................

Re: Search Head Deployer error message

codebuilder — Thu, 21 May 2020 23:23:47 GMT

Awesome, glad it helped!

Re: Search Head Deployer error message

codebuilder — Thu, 21 May 2020 23:26:34 GMT

And on the hashing, yes. As long as all the versions are the same you should not have an issue.
Also, just to note...don't copy the hashed pass4SymmKey value from one member to another. Always enter it in plain text on the member and cycle Splunk.

Re: Search Head Deployer error message

kmugglet — Fri, 29 May 2020 22:45:12 GMT

Update on this, I've installed 7.3.5 from scratch with new plain text pass4symmkey and sslpasswords
Still get the same error, so there's still more to this than just the hashing I think.

I shall persevere and update again if there's any solution

Re: Search Head Deployer error message

codebuilder — Fri, 29 May 2020 22:48:59 GMT

What output do you get from the following (obviously add your user/password) ?:

/opt/splunk/bin/splunk show shcluster-status -auth :