Deployment Architecture

Deployment Server not synchronizing/pushing individual files?

icewolf69
Loves-to-Learn Everything

I've been trying to find an answer to this, and it seems like it's supposed to work. So I'm not sure if I have a misconfiguration or if I'm doing something wrong.

I have a deployment server setup to deploy 1 or 2 apps.  If I go to a machine that has the deployment server configured, and has had the configured app installed (Through the deployment server), and I delete configuration files, etc; the files never get replaced by the deployment server.

It will replace files if i delete the entire app folder... but not individual files.  

Would anyone have any clues on why this is happening?

I have tried the "reload deploy-server" command but it didn't seem to do anything.  Am I being unrealistic to assume individual files would also be checked against the deployment server app?  I want to ensure that inputs, outputs, etc are uniform. And if some were to get deleted or changed, I would need the change to get pushed; for example if someone went in and deleted conf files intentionally or accidently.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

if I recall right DS has counted a check sum for that app when it has installed it. This check sum has stored into some var dire/files (cannot recall it now). When DC connect to DS those just check if these check sums differ and if then redeploy it. Of course it also checks if that app directory is on present.

Probably that was covered some how in this blog post https://hurricanelabs.com/splunk-tutorials/under-the-hood-examining-your-splunk-deployment-server/ ?

r. Ismo

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...