Deployment Architecture

2-tier deployment server topology causes forwarders to restart every a few minutes.

sylim_splunk
Splunk Employee
Splunk Employee

We have a Global deployment server which pushes apps to the Regional deployment servers in AMER, ASIA and EU. Forwarders in each region connect to the Regional DS.
The forwarders appears to be downloading apps successfully but they keep on downloading the same and restart themselves even if there's no changes in apps.

Checksum for apps keeps on changing for the same apps that are supposed to be static. We only do apply updates on the Global DS manually only when it's needed.
Please help.

0 Karma
1 Solution

sylim_splunk
Splunk Employee
Splunk Employee

We found the Regional DS errors out with "Application does not exist", which happens the regional DS tries to install the apps and fails after a download. Then Regional DS repeats the Download-install-fail process even if it's successfully downloaded apps for its forwarders. Forwarders keep downloading the apps as the checksums of apps changing each time on the Regional DS - even if there is nothing changed but datetime of files. - This has beenworked around by adding "crossServerChecksum = true" in regonal DS. This stopped the forwarders repeating restarting but still the regional deployment servers repeat "Download-install-fail" this can be controlled by adding "stateOnClient = noop" as it, as a deployment server doesn't need to install and change the state.

View solution in original post

0 Karma

sylim_splunk
Splunk Employee
Splunk Employee

We found the Regional DS errors out with "Application does not exist", which happens the regional DS tries to install the apps and fails after a download. Then Regional DS repeats the Download-install-fail process even if it's successfully downloaded apps for its forwarders. Forwarders keep downloading the apps as the checksums of apps changing each time on the Regional DS - even if there is nothing changed but datetime of files. - This has beenworked around by adding "crossServerChecksum = true" in regonal DS. This stopped the forwarders repeating restarting but still the regional deployment servers repeat "Download-install-fail" this can be controlled by adding "stateOnClient = noop" as it, as a deployment server doesn't need to install and change the state.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...