topic deployment server debug.. in Deployment Architecture

deployment server debug..

a212830 — Sun, 03 Feb 2013 03:20:39 GMT

Hi,

I'm trying to push out some new configs via the deployment server, but they aren't working. I turned on debug on the client, and I see the following. Can someone decipher this for me?

02-02-2013 22:12:43.143 -0500 DEBUG DeploymentClient - PhoneHomeThread woke up
02-02-2013 22:12:43.143 -0500 DEBUG DeploymentClient - Send phone home
02-02-2013 22:12:43.466 -0500 DEBUG DeploymentClient - Current state: 3, new state: 4
02-02-2013 22:12:43.466 -0500 DEBUG DeploymentClient - Phone home recvd reply: <?xml version="1.0" encoding="UTF-8"?>\n\n
02-02-2013 22:12:43.466 -0500 DEBUG DeploymentClient - DeploymentClient is about to reload a new manifest....
02-02-2013 22:12:43.466 -0500 DEBUG DeploymentClient - DeploymentClient is done reloading...
02-02-2013 22:12:43.466 -0500 DEBUG DeploymentClient - Current state: 4, new state: 3

Re: deployment server debug..

lguinn2 — Sun, 03 Feb 2013 05:53:50 GMT

Okay, it looks like you have set

restartSplunkd = False

in serverclass.conf for this client (or perhaps that is the default for this client). So when the client downloads the app, it doesn't restart splunkd. Therefore, the new app/configs do not take effect. You might want to change that.

You might not have needed to turn on debug. If you had searched the _internal index, you would probably have found much the same thing. Or at least you would have been able to see that the app was being deployed. I like to use a search like this:

index=_internal deployedapplication OR serverclass OR packagedownloadresthandler sourcetype=splunkd 
| table _time host component log_level message

To test that this was the only problem, go to the client and see if the app appears. If yes, then restart splunkd. If that fixes the problem, then this was it!