Deployment Architecture

What does the warning message mean in forwarder management ?

sunrise
Contributor

Hi Splunkers,
I met the warning message in forwarder management which said "One or more apps are initializing download. Please refresh later to see the accurate status of these downloads".

alt text

Later I refreshed browser, but it was appeared again.
And I also restart splunk, but it was same.
What does this message mean ?
How is it not displayed ?

Thank you for your help.

Un10Mar01
New Member

this is production testing.

0 Karma

cald4
Engager

Also happened to me; clearing /opt/splunk/etc/system/local/serverclass.conf and then running "splunk reload deploy-server" worked to get rid of the warning on the forwarder management web page. I'm running x86_64 v6.2.1 build 245427
I was just getting started, only had 2 server classes. I assume I'll be seeing this again.

0 Karma

jameshgibson
Path Finder

I managed to clear this message by deleting all the serverclasses and then re-adding them. This removed the messages and got the apps downloading again.

My guess is SPlunk gets confused as to what has changed on the forwarder(s) and isn't logging the error back correctly.

echalex
Builder

I'm afraid this solution doesn't really fit most users. At least for me, with 500+ forwarders and some 100+ server classes.

0 Karma

jonathan_cooper
Communicator

I am in version 6.1 and seeing this issue also.

aelliott
Motivator

I am having this issue as well, in 6.0.3

0 Karma

wbfoxii
Communicator

I am seeing this now in version 6.0.3.

0 Karma

sunrise
Contributor

I don't know why this happened. But in Splunk V6.0.1, that doesn't happen.

0 Karma

mikelanghorst
Motivator

I still have it in 6.0.1, although all classes show ok

0 Karma

israelgutierrez
Path Finder

Also you can check Reload the Deployment server

/opt/splunk/bin/./splunk reload deploy-server

0 Karma

rgaleone1
Path Finder

sunrise - Have you attempted to restart the splunkforwarder to which the apps are being downloaded?

0 Karma

nurtdi
Path Finder

I have the same issue in Splunk v.6.0.3, "splunk reload deploy-server" and "splunk restart" did not help. As for suggestion: "Have you attempted to restart the splunkforwarder to which the apps are being downloaded?" - there is no easy way to find which forwarder is doing it...

mikelanghorst
Motivator

I'm seeing this as well, even though all classes/apps show as successful.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform

 Are you ready to revolutionize your IT operations? As digital transformation accelerates, the demand for ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...