Deployment Architecture

Best practices for deployment server: make sure app exists

burwell
SplunkTrust
SplunkTrust

I have a case with a deployment server where I renamed an app but didn't update the serverclass.conf.

What happened is that Splunk restarts and does log an error in splunkd.log about the missing app.

I would like to check ahead of time to make sure I don't restart Splunk or reload with a buggy serverclass.conf.

Has anyone written such a checker?

0 Karma

woodcock
Esteemed Legend

Do this:

/opt/splunk/bin/splunk reload deploy-server
0 Karma

burwell
SplunkTrust
SplunkTrust

Hi @woodcock . I did a test today with a missing class (test using Splunk 6.6)

Your session is invalid. Please login.
Splunk username: xxxx
Password:
Login successful, running command...
Reloading serverclass(es).

There was no reported error that I was missing an app. I had actually renamed an app.

Splunk allowed me to restart with the missing app.

0 Karma

woodcock
Esteemed Legend

Bummer. That is the only possibility.

0 Karma

woodcock
Esteemed Legend

Other than maybe btool, which will not classify (just report).

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...