Deployment Architecture

Why is the search head not connecting to deployment server?

a212830
Champion

Hi,

While doing some clean-up, I noticed that we have two apps on our stand-alone SH that are essentially duplicates, and are used to connect to the DS.

I removed one of them, and restarted the SH, but it will not connect to the DS. The targetUri entry is the same, so I'm not sure why it won't connect. If I restore the app, the SH then connects fine. Anyone run into this before? I also tried deleting the record for the host in the DS, but that didn't do anything.

0 Karma

somesoni2
Revered Legend

Try to run btool command on your SH, with both apps present and one more time when only one app is present, and see what and which config file is effective

$SPLUNK_HOME/bin/splunk btool deploymentclient list --debug
0 Karma

sloshburch
Splunk Employee
Splunk Employee

Yea, getting this detail will be interesting. Also, what was in that app...did it include the hash of the pass4symkey for example?

0 Karma

nickhills
Ultra Champion

Have you checked that the remaining app is not disabled?

If my comment helps, please give it a thumbs up!
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...