Hi
I have configured two search head in a cluster and Im trying to deploy the app - splunk-app-for-unix-and-linux_523.tgz bundle to them, but Im getting the error below.
Dev Enviroment:
Splunk 7.2 /RHEL 6.5
1 x master (runs deployer)
2 x indexers (clustered)
2 x search heads (clustered)
I have deployed the ad-on splunk-add-on-for-unix-and-linux_524.tgz to all the splunk servers and can see the add-on in in the web console - looks OK.
I have tested the search head cluster and can see the status as and looks OK.
The command from the deployer:
splunk apply shcluster-bundle -target https://omi10lindp1.ops.com:8089 -auth admin:password
http://docs.splunk.com/Documentation/Splunk/7.0.2/DistSearch/PropagateSHCconfigurationchanges
Error and in the splunkd.log is:
02-08-2018 09:25:59.510 +0000 WARN AppsDeployHandler - Error while deploying apps to first member: Error while deleting app=Splunk_TA_nix on target=https://192.168.0.130:8089: Non-200/201 status_code=500; {"messages":[{"type":"ERROR","text":"\n In handler 'localapps': Cannot update application info: /nobody/Splunk_TA_nix/app/install/state = disabled: Could not find writer for: /nobody/Splunk_TA_nix/app/install/state [0] [/opt/splunk/etc]"}]}
Anyone come across this or similar issue?
Dee
