Deployment Architecture

Deployment Server sending deployment apps to a secondary deployment server

rdevine
Path Finder

So i have a setup where i'm trying to replicate a deployment in site1 to a deployment server in site2. I'm getting error messages in the splunkd.log file and am wondering what part of the config i'm missing.

site1 is the primary deployment server and is supposed to replicate its deployment apps to site2.

the folders and files do exist on site2. i'm not sure why i'm getting these error messages.

splunkd.log file on site2 (debug deploymentclient on):
http://pastebin.com/EndRaupc

example error messages from splunkd.log file


02-08-2012 13:29:10.640 -0600 DEBUG DeploymentClient - eRejectAlways rejects: /opt/splunk/etc/apps
02-08-2012 13:29:10.640 -0600 DEBUG DeploymentClient - stateOnClient=disabled
02-08-2012 13:29:10.640 -0600 DEBUG DeploymentClient - eRejectAlways rejects: /opt/splunk/etc/apps
02-08-2012 13:29:10.641 -0600 WARN DeployedApplication - Installing app: winevt to location: /opt/splunk/etc/deployment-apps/winevt
02-08-2012 13:29:10.641 -0600 DEBUG DeploymentClient - stateOnClient=disabled
02-08-2012 13:29:10.648 -0600 ERROR DeployedApplication - Failed to install app : /opt/splunk/etc/deployment-apps/winevt. Application does not exist: winevt
02-08-2012 13:29:10.648 -0600 WARN DeployedServerClass - There was a problem installing app: winevt for server class: DeployRemote

excerpt from site1 serverclass.conf file:

 
[global]
blacklist.0=*

[serverClass:DeployRemote]
whitelist.0=site2
continueMatching = false
stateOnClient=disabled

[serverClass:DeployRemote:app:*]

deploymentclient.conf file on site2


[deployment-client]

repositoryLocation = /opt/splunk/etc/deployment-apps
serverRepositoryLocationPolicy = rejectAlways
reloadDSOnAppInstall = true

[target-broker:deploymentServer]
targetUri = site:8089

0 Karma

wrangler2x
Motivator

Take a look at this Splunk answer and scroll down to the one which references https://gist.github.com/sworisbreathing/d236895568eaf31da579

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...