App deployment in Splunk 5.0 clustering from a master node

[ssankeneni]

Is it possible to deploy an app from the Splunk master node /master-app/cluster/local to all the peer nodes ?

[hexx · Accepted solution]

As of Splunk 5.0.1, the Cluster Master cannot push apps, the only "app container" that is pushed from the master's $SPLUNK_HOME/etc/apps/master-apps to the slaves' $SPLUNK_HOME/etc/apps/slave-apps is the cluster "app".

As Deployment Server and 3rd party configuration deployment software such as Puppet or Chef are currently unsupported, we will be bringing in the following changes in Splunk 5.0.2 to address this situation:

• The Cluster Master will be able to push apps from its $SPLUNK_HOME/etc/apps/master-apps repository to the slaves' $SPLUNK_HOME/etc/apps/slave-apps.
• As the "cluster" app in that repository is special, it will be renamed to "_cluster".

[mahamed_splunk]

5.0.2 is available now.

[hexx]

Although we cannot commit to a date, we are hoping to release 5.0.2 early next year.

[ssankeneni]

Thanks for the reply. When can I expect the 5.0.2 ? We installed 5.0 and we planned to use the apps to configure our applications.