Deployment Architecture

Error in Pre-deploy check

Nawab
Path Finder

I have 3 new splunk enterprise. 2 are acting as search heads and 1 is acting as deployer.

I have successfully made them as a cluster and can even push user and search configs but when i push app or add-ons from deployer i get below error.

 

Error in pre-deploy check, uri=https://x.x.x.x8089/services/shcluster/captain/kvstore-upgrade/status, status=401, error=No error

even the password is correct for deployer which is also same for both SHs.

What could be the issue here

 

PS: I know splunk recommend to use 3 SH and 1 deployer. I tried it as well but have same issue.

Labels (2)
Tags (1)
0 Karma
1 Solution

Nawab
Path Finder

I found the solution. 
It was Pass4symmkey issue, I had some special charaters in my pass4symmkey due to which there was a difference is passwords.

to check use below commands.

splunk btool server list shcluster --debug | grep -i pass4symmkey ( this will give you your password on spunk)

splunk show-decrypted --value 'pass4symmkey' (this will decrypt the key)

 

now verify the pass key it will surely be a missmatch.

View solution in original post

0 Karma

Nawab
Path Finder

I found the solution. 
It was Pass4symmkey issue, I had some special charaters in my pass4symmkey due to which there was a difference is passwords.

to check use below commands.

splunk btool server list shcluster --debug | grep -i pass4symmkey ( this will give you your password on spunk)

splunk show-decrypted --value 'pass4symmkey' (this will decrypt the key)

 

now verify the pass key it will surely be a missmatch.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...