Unable to remove records from the Deployment Server

[TF39]

Hi guys, i'm in need to delete some records from the deployment server although, when i do it via the forwarder management i get the "This functionality has been deprecated" alert. Is there any other way i can proceed?

[TheDairyGuy]

I had the same issue.  The UF was installed improperly initially, but was showing it reported into the deployment server.  So, the UF was uninstalled, and reinstalled.  It created a new instance in the Deployment server, and will not go away.  I'm curious how I am supposed to deal with this.  I am curious also - will it drop off over time, or is there a way I can go into a config file or something and delete it via CLI?

[TheDairyGuy]

I did have luck running the following command on the deployment server under:

directory: /opt/splunk/bin

./splunk reload deploy-server

After the reload the other instance disappeared.

[reddsbaron]

I see the same issue with trying to delete a duplicate and it never goes away

[kfinn]

I'm seeing this same behavior since upgrade of Splunk HF to version 9.2.2. There is a server that has been retired, usually I would delete the record, and if that system comes back online for any reason it would show back up. Is there another way to remove, or will it drop off over time?

Kevin

[FTS2020]

I had this same issue on a new install of Splunk, clients that still didnt have universal forwarder remove were connecting to this new instance. After removing the UF from those machines I was trying to delete from client list and was receiving this message and would not go away. I needed to reenable deployment server on the new instance in order for me to delete clients by running the following command. Worked for me hope it helps.

sudo /opt/splunk/bin/splunk enable deploy-server
sudo /opt/splunk/bin/splunk restart