https://community.splunk.com/t5/Deployment-Architecture/deploy-apps-to-clients/m-p/97176#M3594 <P>We have a deployment server which pushes custom apps to Search Head, Indexers, Heavyforwarders. We have Search app which contains props and transforms for Search Time field extraction. Whenever we make changes to the conf files within and when we issue the command splunk reload deploy-server / splunk restart on the deployment monitor, the app fails to get pushed to the search head. The other servers have no issue like this. We see the following errors in splunkd.log from the search head </P> <P>01-08-2013 17:05:29.427 -0500 WARN DeployedApplication - Unable to remove folder: D:\ProgramFiles\Splunk\etc\apps\ipc_etac_search_props. Splunk will continue trying to install application. There are no more files. <BR /> 01-08-2013 17:05:29.427 -0500 WARN DeployedApplication - Installing app: ipc_etac_search_props to location: D:\ProgramFiles\Splunk\etc\apps\ipc_etac_search_props <BR /> 01-08-2013 17:05:29.427 -0500 WARN DeployedApplication - Failed to create file D:\ProgramFiles\Splunk\etc\apps\ipc_etac_search_props\lookups\alliance_alarm_info_lookup.csv while untarring D:\ProgramFiles\Splunk\var\run\ipc_All_Search\ipc_etac_search_props-1357681952.bundle: Access is denied. <BR /> 01-08-2013 17:05:29.427 -0500 WARN DeployedServerClass - There was a problem installing app: ipc_etac_search_props for server class: ipc_All_Search <BR /> 01-08-2013 17:05:29.474 -0500 ERROR ConfObjectManagerDB - Cannot initialize: D:\ProgramFiles\Splunk\etc\apps\ipc_etac_search_props\metadata\local.meta: The system cannot find the path specified. </P> <P>Symptom of the issue is usually the app's metadata folder is missing in the deployed app. Once the splunkd restart has occurred, metadata folder reappears, and app would be functional again. However, the next deployment cycle would break it again, and a splunkd restart would be required. </P> Mon, 28 Sep 2020 13:10:28 GMT Chubbybunny 2020-09-28T13:10:28Z https://community.splunk.com/t5/Deployment-Architecture/deploy-apps-to-clients/m-p/97176#M3594 <P>We have a deployment server which pushes custom apps to Search Head, Indexers, Heavyforwarders. We have Search app which contains props and transforms for Search Time field extraction. Whenever we make changes to the conf files within and when we issue the command splunk reload deploy-server / splunk restart on the deployment monitor, the app fails to get pushed to the search head. The other servers have no issue like this. We see the following errors in splunkd.log from the search head </P> <P>01-08-2013 17:05:29.427 -0500 WARN DeployedApplication - Unable to remove folder: D:\ProgramFiles\Splunk\etc\apps\ipc_etac_search_props. Splunk will continue trying to install application. There are no more files. <BR /> 01-08-2013 17:05:29.427 -0500 WARN DeployedApplication - Installing app: ipc_etac_search_props to location: D:\ProgramFiles\Splunk\etc\apps\ipc_etac_search_props <BR /> 01-08-2013 17:05:29.427 -0500 WARN DeployedApplication - Failed to create file D:\ProgramFiles\Splunk\etc\apps\ipc_etac_search_props\lookups\alliance_alarm_info_lookup.csv while untarring D:\ProgramFiles\Splunk\var\run\ipc_All_Search\ipc_etac_search_props-1357681952.bundle: Access is denied. <BR /> 01-08-2013 17:05:29.427 -0500 WARN DeployedServerClass - There was a problem installing app: ipc_etac_search_props for server class: ipc_All_Search <BR /> 01-08-2013 17:05:29.474 -0500 ERROR ConfObjectManagerDB - Cannot initialize: D:\ProgramFiles\Splunk\etc\apps\ipc_etac_search_props\metadata\local.meta: The system cannot find the path specified. </P> <P>Symptom of the issue is usually the app's metadata folder is missing in the deployed app. Once the splunkd restart has occurred, metadata folder reappears, and app would be functional again. However, the next deployment cycle would break it again, and a splunkd restart would be required. </P> Mon, 28 Sep 2020 13:10:28 GMT https://community.splunk.com/t5/Deployment-Architecture/deploy-apps-to-clients/m-p/97176#M3594 Chubbybunny 2020-09-28T13:10:28Z https://community.splunk.com/t5/Deployment-Architecture/deploy-apps-to-clients/m-p/97177#M3595 <P>The old file was being used by the app, so that it couldn't been replaced. <BR /> Once splunkd with the app has stopped, the patch can be applied to the app so that restart will make it work. This is a normal behavior on Windows platform.</P> Wed, 23 Jan 2013 19:13:37 GMT https://community.splunk.com/t5/Deployment-Architecture/deploy-apps-to-clients/m-p/97177#M3595 splunkIT 2013-01-23T19:13:37Z