Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Why isn't calendar_heatmap_app being deployed to t...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I deployed the out-of-the-box calendar_heatmap_app from the deployer server to the three search heads. They haven't reached /opt/splunk/etc/apps on the three SHs.
grep -i heatmap < splunkd.log on the deployer doesn't show anything. What can it be?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So you had the apps in deployment-apps but your command output is for a cluster. Search head cluster members are not managed via deployment apps but etc/shcluster/apps/
If your search heads are clustered. Placed the heatmap app under etc/shcluster/apps on the search head deployer and then push the bundle. It should now reach to search heads
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So you had the apps in deployment-apps but your command output is for a cluster. Search head cluster members are not managed via deployment apps but etc/shcluster/apps/
If your search heads are clustered. Placed the heatmap app under etc/shcluster/apps on the search head deployer and then push the bundle. It should now reach to search heads
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Monday syndrome ; -)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did you check if your bundle push command did not error out? Did it say successful ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Right, it said - Bundle has been pushed successfully to all the cluster members.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did you put the app in etc/shcluster/apps or etc/apps under the deployer? Any errors in conf.log /var/log/splunk/conf.log on the deployer
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I placed the app under - /opt/splunk/etc/deployment-apps/.
About - /opt/splunk/var/log/splunk
$ grep -i error < conf.log
No errors since 05-12-2018.
Observe and Secure All Apps with Splunk
Splunk Decoded: Business Transactions vs Business IQ
Fastest way to demo Observability
