Deployment Architecture

Deploy app to distributed search head

craigmunro
Path Finder

Hi

I'm trying to use the deployment server to deploy apps to my search head.

The app is installed in $SPLUNK_HOME/etc/apps which would normally be correct but the config for the pooled search head is stored on a shared drive.

The app.conf file in the shared location appears to be updated but not any of the other files.

Should I update serverclass.conf to specify the shared location as the targetRepositoryLocation? What happens if I have multiple search heads?

Is this supported/recommended?

I'm using Splunk 4.2.1

Thanks

Tags (1)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

I think you should update deploymentclient.conf to change the repositoryLocation to be the pool location:

[deployment-client]
repositoryLocation = /path/to/shared/storage/etc/apps

And you should only set up one of the search heads (in each pool if you have more than one pool) as a Deployment Server client.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

I think you should update deploymentclient.conf to change the repositoryLocation to be the pool location:

[deployment-client]
repositoryLocation = /path/to/shared/storage/etc/apps

And you should only set up one of the search heads (in each pool if you have more than one pool) as a Deployment Server client.

weeb
Splunk Employee
Splunk Employee

FYI: clientName does not need to be set unless the desired effect is to replace the hostname (from DNS) with this specified value.

0 Karma

craigmunro
Path Finder

Thanks, that works but I also had to add the location policy.


[deployment-client]
clientName=search_head
repositoryLocation = /path/to/shared/storage/etc/apps
serverRepositoryLocationPolicy = rejectAlways
0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...