My Splunk DCN for VMware suddenly stopped sending data.
The apps are there
I have restarted the DCN and confirmed that the services are running. Any help would be appreciated!
Can you double-check and try the latest version in both DCN and SH VMware Scheduler? Especially SA-Utils should not be used for the latest version.
How do I update the DCN? Do I need to delete and re-deploy it?
Probably that's best. 1. Stop Scheduler, delete the DCN node from the config page 2. Stop DCN Splunk 3. Remove all the VMware apps package 4. Deploy a new package 5. Start the DCN Splunk 6. Set up DCNs 7. Start Scheduler
Can I just delete the virtual machine and download a new .ova for the DCN (for steps 2-5)?
I deleted the DCN and redeployed it using a fresh OVA. I followed the instructions exactly. I am still getting the same error.
Splunk DCN is currently at version 161229a
And, all apps seem to be there
Please file a Splunk Support case, and submit diags from the scheduler and DCN. I believe that's faster route to identify cause of the issue.
Does anyone have any advice on this?
