Deployment Architecture

debugging deployment server

a212830
Champion

Hi,

Are there any logfiles that show the deployment server attempting to push changes out (or, on the other side, in?) I made some changes, but they are not getting pushed out. The connection between the server and client is there, but nothing gets pushed when I reload the server.

Tags (1)
0 Karma

lguinn2
Legend

Yes, and they are all splunked. You can find them by searching the _internal index. Additionally, forwarders send their key logs to the indexer, so you see both "sides" of the deployment server / deployment client interaction.

Here are some searches that I like to use:

index=_internal component=deploy* OR component=serverclass sourcetype=splunkd 
| fields host component log_level message
| table _time host component log_level message

index=_internal sourcetype=splunkd component=Metrics group=ds_connections* |
rename ip as deploymentClient mgmt as mgmtPort |
fields deploymentClient mgmtPort utsname dsevent |
table _time deploymentClient mgmtPort utsname dsevent 
0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...