topic Re: Deployment Clients can't check in to Deployment Server in Deployment Architecture

Deployment Clients can't check in to Deployment Server

Olamide22 — Tue, 01 Oct 2019 22:08:29 GMT

All,

I have gone through all the related threads here but I can't find a possible solution to my version of this issue. I have a UF -> Intermediate forwarders -> Splunk Cloud setup. I have about 500+ UFs in my environment. I was working to update the certs used by the UF to self signed certs. I tested on a sample device and once validated that all works I renamed the app to what I wanted and pushed out the app to all my windows UFs. Turns out that I had an incorrect file path to my RootCA in server.conf. So, all my UFs can't connect to the DS to get the update app.

I hoped on a box that I have access to and can confirm that if I update the path, the UF checks in. So, for the 500+ UFs, I am really struggling to find a way to have them connect with the DS. I'm honestly not sure that is possible. The error that I is :

"DC:DeploymentClient - channel=tenantService/handshake Will retry sending handshake message to DS; err=not_connected"

Outside of pushing a script with SCCM or like tools to uninstall the app and force a UF restart, which is going to be hell, I'm not sure what options i have. Are you good people here able to assist? I really need this one.

Thanks.

Re: Deployment Clients can't check in to Deployment Server

harsmarvania57 — Wed, 02 Oct 2019 08:09:41 GMT

Hi,

You don't have any other option so you need to use 3rd party tools like SCCM, Ansible etc. to remove/reinstall that faulty app and restart UF.

Re: Deployment Clients can't check in to Deployment Server

broberg — Wed, 02 Oct 2019 11:52:02 GMT

Ouch.
I have a simular issue and created a powershell script that i pushed from GPO on the windows host, and ansible for the linux host.
Took around 1-2 hour to get it up and working, alot faster then to deploy it manually on the 40 hosts i had.

Re: Deployment Clients can't check in to Deployment Server

Olamide22 — Wed, 02 Oct 2019 13:01:54 GMT

I figured as much. Just wanted to check if there was a chance there is another option. Thanks.

Re: Deployment Clients can't check in to Deployment Server

Olamide22 — Wed, 02 Oct 2019 13:04:02 GMT

Thanks. This is probably the direction I will go.