Getting Data In

Deployment server test app download failed

antlefebvre
Communicator

I just created a test app for my environment to be pushed to a single workstation. It does not successfully deploy from this server shown in the forwarder management GUI. The error message in the splunkd.log is

01-14-2014 08:13:51.367 -0500 WARN  ClientSessionsManager - ip=10.237.1.63 name=ANT-andDESK Updating record for sc=Global Win x64 Client app=fwd_to_splunkprod: action=Install result=Fail

and

01-14-2014 08:13:51.367 -0500 WARN  ClientSessionsManager - ip=10.237.1.63 name=ANT-DESK Updating record for sc=Global Win x64 Client app=fwd_to_splunkprod: action=Download result=Fail

Not sure what to look at next to troubleshoot this issue. The forwarder creates the folder, but does not transfer the app.

0 Karma
1 Solution

lukejadamec
Super Champion

This should help with verifying your configuration, and troubleshooting.

http://wiki.splunk.com/Deploy:DeploymentServer

View solution in original post

lukejadamec
Super Champion

This should help with verifying your configuration, and troubleshooting.

http://wiki.splunk.com/Deploy:DeploymentServer

antlefebvre
Communicator

Using the Forward Management GUI I entered a server class of Global Win x86 Client. The debug said Global didn't exist. Used _ instead of spaces and the problem cleared up right away.

0 Karma

jbsplunk
Splunk Employee
Splunk Employee

You might want to turn up debugging on the client and server in $SPLUNK_HOME/etc/log.cfg. I would set the following components to debug on the server:

category.DeployedApplication=DEBUG
category.DeployedServerclass=DEBUG
category.DC:UpdateServerclassHandler=DEBUG
category.DeploymentServer=DEBUG

On the client, in the same file, I would set:

category.DC:DeploymentClient=DEBUG

Restart, then hopefully you'll find some meaningful messages in the server and/or client in splunkd.log

antlefebvre
Communicator

The splunkd process is running as root on the deployment server.

0 Karma

aholzer
Motivator

Have you made sure Splunk DeploymentServer has permissions to the files it's trying to transfer?

0 Karma
Get Updates on the Splunk Community!

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...