Deployment Architecture

Errors Uninstalling Apps with Deployment Server Preventing Splunkd restarts

oreoshake
Communicator

When uninstalling an app, the following errors are preventing splunkd for restarting:

03-30-2010 22:28:12.157 WARN  DeployedApplication - Uninstalling application: sample_app
03-30-2010 22:28:12.157 WARN  DeployedApplication - Removing app at location: /opt/splunk/etc/apps/sample_app
03-30-2010 22:30:06.068 ERROR IniFile - Cannot open ini file for parsing: No such file or directory
03-30-2010 22:30:06.068 ERROR ConfObjectManagerDB - Cannot initialize: /opt/splunk/etc/apps/sample_app/metadata/default.meta

I copied the entire default app/* structure (except search) to my deployment-apps directory on the deployment server. This file exists on the forwarders prior to the uninstallation. After a manual restart, everything seems to work fine.

I realize I can just set stateOnClient = disabled, but there may be cases when we want to completely remove custom apps.

Any idea what could be causing this problem?

Tags (3)

gkanapathy
Splunk Employee
Splunk Employee

It is likely to be this issue, which has been resolved in 4.0.10:

Deploying apps that do not contain a local directory will no longer cause Splunk to crash on the client. (SPL-29019, SPL-30225)

http://docs.splunk.com/Documentation/Splunk/4.0.10/ReleaseNotes/4.0.10

oreoshake
Communicator

Well I am using 4.0.10. It is true that my forwarders are not crashing, but the error is preventing the deployment process from restarting the deployment client

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Catalog Is Now Generally Available on Splunk Cloud Platform

A Unified View of Your Data  Security logs, application events, business data, and historical telemetry often ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...