Deployment Architecture

If a deployment server crashes and we don't have a backup, will clients start using a fresh installed deployment server if I use the same ip/hostname

bondbig
Engager

Hi!

Let's imagine that deployment server has crashed and we don't have full backup to restore it from. What will happen if I install a new one with the same hostname/ip? Will agents successfully start using the new one? Do forwarders somehow check authenticity of deployment server?

0 Karma

HiroshiSatoh
Champion

This is from my experience.

The agent continues movement. If the new server is running and connected to the new server.
However, apps of the agent side replaces the deployment-apps of the new server by the re-check.
If the deployment server side there is no deployment-apps are deployed apps of the agent side is deleted.

I think better to remove the setting of serverclass.conf if a trial basis to start the deployment server is good.

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...