Deployment Architecture

Why isn't calendar_heatmap_app being deployed to the SHs?

ddrillic
Ultra Champion

I deployed the out-of-the-box calendar_heatmap_app from the deployer server to the three search heads. They haven't reached /opt/splunk/etc/apps on the three SHs.

grep -i heatmap < splunkd.log on the deployer doesn't show anything. What can it be?

0 Karma
1 Solution

pradeepkumarg
Influencer

So you had the apps in deployment-apps but your command output is for a cluster. Search head cluster members are not managed via deployment apps but etc/shcluster/apps/

If your search heads are clustered. Placed the heatmap app under etc/shcluster/apps on the search head deployer and then push the bundle. It should now reach to search heads

View solution in original post

0 Karma

pradeepkumarg
Influencer

So you had the apps in deployment-apps but your command output is for a cluster. Search head cluster members are not managed via deployment apps but etc/shcluster/apps/

If your search heads are clustered. Placed the heatmap app under etc/shcluster/apps on the search head deployer and then push the bundle. It should now reach to search heads

0 Karma

ddrillic
Ultra Champion

Monday syndrome ; -)

0 Karma

pradeepkumarg
Influencer

Did you check if your bundle push command did not error out? Did it say successful ?

0 Karma

ddrillic
Ultra Champion

Right, it said - Bundle has been pushed successfully to all the cluster members.

0 Karma

pradeepkumarg
Influencer

Did you put the app in etc/shcluster/apps or etc/apps under the deployer? Any errors in conf.log /var/log/splunk/conf.log on the deployer

0 Karma

ddrillic
Ultra Champion

I placed the app under - /opt/splunk/etc/deployment-apps/.

About - /opt/splunk/var/log/splunk
$ grep -i error < conf.log

No errors since 05-12-2018.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...