Getting Data In

Deployment Monitor does not show up data

nebel
Communicator

Hi there,

I have two searchheads. One of them is the deployment server.

I moved the Deployment Monitor from the searchhead1 (deployment server) to the second searchhead. Since I moved it to searchhead2 the App doesn't work anymore. In the job list I can see all the jobs, but witout results.
All summary indexes are empty. What is wrong? I just deleted the app from searchhead one and installed it new on searchhead2.

Thanks in advance

Regards

Tags (2)
0 Karma
1 Solution

araitz
Splunk Employee
Splunk Employee

Which views in particular are you not seeing data in? If it is the throughput and licensing views, I think the issue is that searchhead1 was doing the licensing. By design, a lot of the data required for that part of the app is only available on the licensing instance. You could forward the license_audit and license_usage logs to searchhead2 from searchhead1 or temporarily add searchhead1 as a peer to searchhead2 to see if the data returns.

View solution in original post

0 Karma

araitz
Splunk Employee
Splunk Employee

Which views in particular are you not seeing data in? If it is the throughput and licensing views, I think the issue is that searchhead1 was doing the licensing. By design, a lot of the data required for that part of the app is only available on the licensing instance. You could forward the license_audit and license_usage logs to searchhead2 from searchhead1 or temporarily add searchhead1 as a peer to searchhead2 to see if the data returns.

0 Karma

nebel
Communicator

hi! good news, i have seen that all the searches work fine, i also get results from them. In the jobs monitor i see all the jobs from DM. The one and only thing is, that these results will not written into the summary indexes. Any ideas?

0 Karma

araitz
Splunk Employee
Splunk Employee

It is unclear to me what could be going on. Can you please open a support case? That way, we can get a diag file and investigate further.

0 Karma

nebel
Communicator

hello! no views are working. yesterday i regognized, that outputs.conf the function forwardandindex=disabled. after activating this point, the index summary_sources is getting data and I can use minimal functions in the app. but other views like forwarder connections, license usage still does not work. the indexes summary_indexers, summary_forwarders etc. don't get data...

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...