Deployment Architecture

Deployment Server and deployment apps issue.

splunktrainingu
Communicator

I am having issues with my deployment app config files. Whenever I edit the config file for my applications in my deployment apps and save it it doesn't replicate to those deployment clients. From my understanding the clients check their md5 hash of the apps in their folder and the server compares then pushes the new config files. I am not seeing any of my changes propagate because I know that I edited the config file and added event ID 4776 to be blacklisted and I can see it in my search results.

How do I fix this?

Labels (2)
Tags (1)
0 Karma
1 Solution

splunktrainingu
Communicator

Silly me, so under forwarder management you have to go to the apps tab and check the splunkd restart box and this fixed the the problem.

View solution in original post

0 Karma

splunktrainingu
Communicator

Silly me, so under forwarder management you have to go to the apps tab and check the splunkd restart box and this fixed the the problem.

0 Karma
Get Updates on the Splunk Community!

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...