Deployment Architecture

Why is the search head not connecting to deployment server?

a212830
Champion

Hi,

While doing some clean-up, I noticed that we have two apps on our stand-alone SH that are essentially duplicates, and are used to connect to the DS.

I removed one of them, and restarted the SH, but it will not connect to the DS. The targetUri entry is the same, so I'm not sure why it won't connect. If I restore the app, the SH then connects fine. Anyone run into this before? I also tried deleting the record for the host in the DS, but that didn't do anything.

0 Karma

somesoni2
Revered Legend

Try to run btool command on your SH, with both apps present and one more time when only one app is present, and see what and which config file is effective

$SPLUNK_HOME/bin/splunk btool deploymentclient list --debug
0 Karma

sloshburch
Ultra Champion

Yea, getting this detail will be interesting. Also, what was in that app...did it include the hash of the pass4symkey for example?

0 Karma

nickhills
Ultra Champion

Have you checked that the remaining app is not disabled?

If my comment helps, please give it a thumbs up!
0 Karma
Get Updates on the Splunk Community!

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

What's New in Splunk Observability - October 2025

What’s New?    We’re excited to announce the latest enhancements to Splunk Observability Cloud and share ...