topic Re: Unable to remove records from the Deployment Server in Deployment Architecture

Unable to remove records from the Deployment Server

TF39 — Tue, 03 Sep 2024 10:52:56 GMT

Hi guys, i'm in need to delete some records from the deployment server although, when i do it via the forwarder management i get the "This functionality has been deprecated" alert. Is there any other way i can proceed?

Re: Unable to remove records from the Deployment Server

kfinn — Tue, 10 Sep 2024 12:04:00 GMT

I'm seeing this same behavior since upgrade of Splunk HF to version 9.2.2. There is a server that has been retired, usually I would delete the record, and if that system comes back online for any reason it would show back up. Is there another way to remove, or will it drop off over time?

Kevin

Re: Unable to remove records from the Deployment Server

reddsbaron — Thu, 19 Sep 2024 12:29:53 GMT

I see the same issue with trying to delete a duplicate and it never goes away

Re: Unable to remove records from the Deployment Server

FTS2020 — Sun, 29 Sep 2024 13:41:34 GMT

I had this same issue on a new install of Splunk, clients that still didnt have universal forwarder remove were connecting to this new instance. After removing the UF from those machines I was trying to delete from client list and was receiving this message and would not go away. I needed to reenable deployment server on the new instance in order for me to delete clients by running the following command. Worked for me hope it helps.

sudo /opt/splunk/bin/splunk enable deploy-server
sudo /opt/splunk/bin/splunk restart

Re: Unable to remove records from the Deployment Server

TheDairyGuy — Tue, 29 Oct 2024 18:54:34 GMT

I had the same issue. The UF was installed improperly initially, but was showing it reported into the deployment server. So, the UF was uninstalled, and reinstalled. It created a new instance in the Deployment server, and will not go away. I'm curious how I am supposed to deal with this. I am curious also - will it drop off over time, or is there a way I can go into a config file or something and delete it via CLI?

Re: Unable to remove records from the Deployment Server

TheDairyGuy — Tue, 29 Oct 2024 19:35:45 GMT

I did have luck running the following command on the deployment server under:

directory: /opt/splunk/bin

./splunk reload deploy-server

After the reload the other instance disappeared.