Deployment Architecture

Deployment server not deploying apps to clients DS version 9.4.5

Singhk1
Engager

hi All,

 

Got a very strange issue.  

DS version 9.4.5. OS rhel 8+

DS is not deploying app to clients. Deploy server is enabled , I can see client under serverclass, i can see app assigned server classes assigned but when i add new apps its not deploying neither does "reload deploy-server " works for some reason i can see in logs its reloading server classes and path some how points to /opt/splunk/var/run/tmp/_global_bundles/ there before deploying is that correct ?

 

i have tried everything possible cant find any thing why is not sending the apps though it says it has

regards,

singhk1

  

 

 

 

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @Singhk1 

The deployment server (DS) uses the /opt/splunk/var/run/tmp/_global_bundles/ directory temporarily to stage and prepare the server class bundles before they are sent to the clients. Seeing activity in this path during a deployment cycle is normal.

I think it would be worth reviewing https://splunk.my.site.com/customer/s/article/Universal-Forwarders-failing-to as it sounds like it could be related. Did you upgrade from 9.3.x?

Please could you review that help guide and let me know if it helps or not and we can take it from there?

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Singhk1
Engager

I have a working DS  which is classic old DS 9.2.4  and it has all the bundles under $SPLUNK_HOME/var/run/tmp where i can see all serverclasses and respctive bundles in the serverclass directories

the DS which is problematic is a fresh install of 9.4.5 and i have copied all serverclass apps and whitelist apps to apps directory  for example there is a app xyz with server class my_serverclass_xyz and my_whitelist_xyz.

hope I am making some sense.

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...