Deployment Architecture

Restart all Forwarders at once using DM?

sathiyasun
Explorer

I was using DM and a app to restart all the forwarders at once but it stopped working
Click on restart then save its not restarting the FW's. Please advice.

Tags (1)
0 Karma

maciep
Champion

Just to be sure I understand, you are using a deployment server? And you have an app, maybe like a "dummy" app, that you use to push splunk restarts to your forwarders? But now that's not working?

If that's the case, is the app and all of the forwarders still associated with a server class? Are the forwarders still checking in, and downloading other app changes? Are you actually making changes to the contents of restart app before saving it? If the contents haven't changed, then maybe splunk thinks no changes need downloaded, and therefore no restart is necessary.

Also, maybe the splunk version of your ds and forwarders could be helpful (maybe there's a known bug). And of course, if anything changed in your env between when it did work and now, that would be good to know.

0 Karma

ppablo
Retired

Hi @sathiyasun

What are you referring to when you say "DM"?

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...