Deployment Architecture

Copying serverclass.conf to cold Deployment Server

edhealea
Path Finder

I have setup a second Deployment Server for disaster recovery purposes. I am using rsync in a cron job to copy the deployment-apps directory and the serverclass.conf file over from the primary DS to the cold DS. When I look at my cold DS Forward Management console my Apps number match with the primary DS but my Server Classes are short by three server classes.
I grep the serverclass.conf from both servers and the missing classes are not there plus I have looked in the default/serverclass.conf.
What would cause three not to copy over? Is there another file I need to grab off the primary DS?

Labels (1)
0 Karma
1 Solution

scelikok
SplunkTrust
SplunkTrust

Hi @edhealea,

While you make config changes using GUI, serverclass.conf can get created on different apps. You can find all serverclass.conf files that active using btool.

./splunk btool serverclass list --debug | grep local

Merging all of them into one app and making all further changes inside that app would prevent rsync loose a config.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

View solution in original post

0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @edhealea,

While you make config changes using GUI, serverclass.conf can get created on different apps. You can find all serverclass.conf files that active using btool.

./splunk btool serverclass list --debug | grep local

Merging all of them into one app and making all further changes inside that app would prevent rsync loose a config.

If this reply helps you an upvote and "Accept as Solution" is appreciated.
0 Karma

edhealea
Path Finder

Thanks!
Using your btool command located the missing server classes. 
Everything is working as expected.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...