Deployment Architecture

Deployment Server not synchronizing/pushing individual files?

icewolf69
Loves-to-Learn Everything

I've been trying to find an answer to this, and it seems like it's supposed to work. So I'm not sure if I have a misconfiguration or if I'm doing something wrong.

I have a deployment server setup to deploy 1 or 2 apps.  If I go to a machine that has the deployment server configured, and has had the configured app installed (Through the deployment server), and I delete configuration files, etc; the files never get replaced by the deployment server.

It will replace files if i delete the entire app folder... but not individual files.  

Would anyone have any clues on why this is happening?

I have tried the "reload deploy-server" command but it didn't seem to do anything.  Am I being unrealistic to assume individual files would also be checked against the deployment server app?  I want to ensure that inputs, outputs, etc are uniform. And if some were to get deleted or changed, I would need the change to get pushed; for example if someone went in and deleted conf files intentionally or accidently.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

if I recall right DS has counted a check sum for that app when it has installed it. This check sum has stored into some var dire/files (cannot recall it now). When DC connect to DS those just check if these check sums differ and if then redeploy it. Of course it also checks if that app directory is on present.

Probably that was covered some how in this blog post https://hurricanelabs.com/splunk-tutorials/under-the-hood-examining-your-splunk-deployment-server/ ?

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...