Deployment Architecture

Deployment Server sending deployment apps to a secondary deployment server

rdevine
Path Finder

So i have a setup where i'm trying to replicate a deployment in site1 to a deployment server in site2. I'm getting error messages in the splunkd.log file and am wondering what part of the config i'm missing.

site1 is the primary deployment server and is supposed to replicate its deployment apps to site2.

the folders and files do exist on site2. i'm not sure why i'm getting these error messages.

splunkd.log file on site2 (debug deploymentclient on):
http://pastebin.com/EndRaupc

example error messages from splunkd.log file


02-08-2012 13:29:10.640 -0600 DEBUG DeploymentClient - eRejectAlways rejects: /opt/splunk/etc/apps
02-08-2012 13:29:10.640 -0600 DEBUG DeploymentClient - stateOnClient=disabled
02-08-2012 13:29:10.640 -0600 DEBUG DeploymentClient - eRejectAlways rejects: /opt/splunk/etc/apps
02-08-2012 13:29:10.641 -0600 WARN DeployedApplication - Installing app: winevt to location: /opt/splunk/etc/deployment-apps/winevt
02-08-2012 13:29:10.641 -0600 DEBUG DeploymentClient - stateOnClient=disabled
02-08-2012 13:29:10.648 -0600 ERROR DeployedApplication - Failed to install app : /opt/splunk/etc/deployment-apps/winevt. Application does not exist: winevt
02-08-2012 13:29:10.648 -0600 WARN DeployedServerClass - There was a problem installing app: winevt for server class: DeployRemote

excerpt from site1 serverclass.conf file:

 
[global]
blacklist.0=*

[serverClass:DeployRemote]
whitelist.0=site2
continueMatching = false
stateOnClient=disabled

[serverClass:DeployRemote:app:*]

deploymentclient.conf file on site2


[deployment-client]

repositoryLocation = /opt/splunk/etc/deployment-apps
serverRepositoryLocationPolicy = rejectAlways
reloadDSOnAppInstall = true

[target-broker:deploymentServer]
targetUri = site:8089

0 Karma

wrangler2x
Motivator

Take a look at this Splunk answer and scroll down to the one which references https://gist.github.com/sworisbreathing/d236895568eaf31da579

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...