How do I fix this error: Not deployed Error for one of the app in deployment server

[krish899]

One app is not downloading into deployment server, whereas similar domain servers have downloaded successfully.

I have 3 servers and one of the server's deployment apps is not downloaded into Deployment server and below are the errors that i get in splunkd.log.

I did restart the forwarder and check the serverclass conf and deployment client conf on host (server side) .
Please help in troubleshooting this.

3-10-2017 11:49:26.917 -0600 INFO  TcpOutputProc - Connected to index=10.168.119.169:9998
03-10-2017 11:49:30.372 -0600 INFO  DeployedApplication - Checksum mismatch 0 <> 2832250735596352352 for app=xes. Will reload from='splunkinstance:8089/services/streams/deployment?name=default:serverclass:app'
03-10-2017 11:49:30.401 -0600 WARN  HTTPClient - Unable to create/replace target file: /splunkforwarder/var/run/serverclass/app-1489083118.bundle to download url splunkinstance:8089 with request POST /services/streams/deployment?name=default:serverclass:app HTTP/1.0.
03-10-2017 11:49:30.401 -0600 WARN  DeployedApplication - Problem downloading from uri=splunkinstance:8089 to path='/services/streams/deployment?name=default:serverclass:app'
03-10-2017 11:49:30.401 -0600 ERROR DeployedServerclass - name=serverclass Failed to download app=app
03-10-2017 11:50:46.355 -0600 WARN  TcpOutputProc - Cooked connection to ip=10.178.118.158:9997 timed out
03-10-2017 11:51:07.356 -0600 WARN  TcpOutputProc - Cooked connection to ip=10.178.118.158:9998 timed out
03-10-2017 11:51:45.206 -0600 WARN  TcpOutputProc - Cooked connection to ip=10.178.118.158:9997 timed out
03-10-2017 11:51:46.590 -0600 INFO  TcpOutputProc - Connected to index=10.168.119.169:9997
03-10-2017 11:51:56.541 -0600 INFO  TcpOutputProc - Connected to index=10.168.119.169:9998
03-10-2017 11:52:26.589 -0600 INFO  TcpOutputProc - Connected to index=10.168.119.169:9997
03-10-2017 11:52:57.070 -0600 INFO  TcpOutputProc - Connected to index=10.168.119.169:9998
03-10-2017 11:53:45.071 -0600 WARN  TcpOutputProc - Cooked connection to ip=10.178.118.158:9998 timed out
03-10-2017 11:54:30.469 -0600 INFO  DeployedApplication - Checksum mismatch 0 <> 2832250735596352352 for app=app. Will reload from='splunkinstance:8089/services/streams/deployment?name=default:serverclass:app'
03-10-2017 11:54:30.481 -0600 WARN  HTTPClient - Unable to create/replace target file: //splunkforwarder/var/run/serverclass/app-1489083118.bundle to download url splunkinstance:8089 with request POST /services/streams/deployment?name=default:serverclass:app HTTP/1.0.
03-10-2017 11:54:30.481 -0600 WARN  DeployedApplication - Problem downloading from uri=splunkinstance:8089 to path='/services/streams/deployment?name=default:serverclass:app'

[dm1]

were you able to fix it ?

[lguinn2]

My first suggestion is that you should check the permissions and file ownership of everything in app on the Deployment Server, including the directory itself.
Second, you should check that all the files on the Splunk Forwarder belong to the user account that runs the forwarder, and that the permissions are set so that it can write to the app directory.

Finally, have you obfuscated some of the information from the log file? What exactly is the name (or names) of the app involved? The log file looks a bit strange to me.