Deployment Architecture

If a deployment server crashes and we don't have a backup, will clients start using a fresh installed deployment server if I use the same ip/hostname

bondbig
Engager

Hi!

Let's imagine that deployment server has crashed and we don't have full backup to restore it from. What will happen if I install a new one with the same hostname/ip? Will agents successfully start using the new one? Do forwarders somehow check authenticity of deployment server?

0 Karma

HiroshiSatoh
Champion

This is from my experience.

The agent continues movement. If the new server is running and connected to the new server.
However, apps of the agent side replaces the deployment-apps of the new server by the re-check.
If the deployment server side there is no deployment-apps are deployed apps of the agent side is deleted.

I think better to remove the setting of serverclass.conf if a trial basis to start the deployment server is good.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...