Deployment Architecture

How to migrate to a new deployment server?

manderson7
Contributor

I created an "app" on my old deployment server in etc/deployment-apps/ called deployserver, and in it, created the local directory, and in that created deploymentclient.conf. Deploymentclient.conf contains

[deployment-client]
disabled = false

[targer-broker: deploymentServer]
targerUri = newdeployserver.domain.com:8089

[license]
Master_uri = newlicenseserver.domain.com:8089

And when I reload my legacy deployment server, the deployserver app is dropped onto the client. I'm manually restarting the splunkforwarder on the client (something's weird w/ my serverclasses.conf), and when the client comes back up, the new deployment server doesn't see it. Only after I run bin/splunk set deploy-poll newdeployserver.domain.com:8089 and restart, the splunkforwarder does start talking to the new deployment server.

Reading about precedence, I see that etc/system/local/ will take precedence over an app config, but I thought the deployment config app was a possibility.
Has anyone done this, created a deployment server app? How'd you get it to work?
Thanks for any help.

0 Karma

doitslu
Explorer

You could use a dirty hack:

Add a scripted input to your app on the old deployment server and miss use the input script to remove the old deploymentserver config from etc/system/local in case it exists.

Deploy this app down to your clients and all clients should now remove the config from etc/system/local and have a new config within your app.

However you then need to restart the clients to get the new config active e.g. by removing the scripted input on the deployment server, setting restartSplunkd = true and deploying the app again.

Additionally you should also place your configuration app (without the scripted input) on the new deployment Server.

Probably not the best way but a way you could potentially go if you have no other chances. But you should first carefully check with a single test client!

adylent
Path Finder

I believe you need to remove the etc/system/local config, and then ensure you deploy the app to /etc/apps/deploymentserver. If there is a conflict, etc/system/local will always win.

0 Karma

manderson7
Contributor

Thats a bummer. So in fact, I can't go from a non-managed deploy server configuration to a managed deploy server configuration without touching all the boxes, huh?

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...