Getting Data In

Deployment server test app download failed

antlefebvre
Communicator

I just created a test app for my environment to be pushed to a single workstation. It does not successfully deploy from this server shown in the forwarder management GUI. The error message in the splunkd.log is

01-14-2014 08:13:51.367 -0500 WARN  ClientSessionsManager - ip=10.237.1.63 name=ANT-andDESK Updating record for sc=Global Win x64 Client app=fwd_to_splunkprod: action=Install result=Fail

and

01-14-2014 08:13:51.367 -0500 WARN  ClientSessionsManager - ip=10.237.1.63 name=ANT-DESK Updating record for sc=Global Win x64 Client app=fwd_to_splunkprod: action=Download result=Fail

Not sure what to look at next to troubleshoot this issue. The forwarder creates the folder, but does not transfer the app.

0 Karma
1 Solution

lukejadamec
Super Champion

This should help with verifying your configuration, and troubleshooting.

http://wiki.splunk.com/Deploy:DeploymentServer

View solution in original post

lukejadamec
Super Champion

This should help with verifying your configuration, and troubleshooting.

http://wiki.splunk.com/Deploy:DeploymentServer

antlefebvre
Communicator

Using the Forward Management GUI I entered a server class of Global Win x86 Client. The debug said Global didn't exist. Used _ instead of spaces and the problem cleared up right away.

0 Karma

jbsplunk
Splunk Employee
Splunk Employee

You might want to turn up debugging on the client and server in $SPLUNK_HOME/etc/log.cfg. I would set the following components to debug on the server:

category.DeployedApplication=DEBUG
category.DeployedServerclass=DEBUG
category.DC:UpdateServerclassHandler=DEBUG
category.DeploymentServer=DEBUG

On the client, in the same file, I would set:

category.DC:DeploymentClient=DEBUG

Restart, then hopefully you'll find some meaningful messages in the server and/or client in splunkd.log

antlefebvre
Communicator

The splunkd process is running as root on the deployment server.

0 Karma

aholzer
Motivator

Have you made sure Splunk DeploymentServer has permissions to the files it's trying to transfer?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...