Getting Data In

Splunk Deployment Server Agent Management Unavailable

ws
Path Finder

Splunk Enterprise Version: 10.2.2

Has anyone encountered an issue where the Deployment Server Agent Management page shows "Agent Management Unavailable"?

I have two identical Splunk Deployment Servers deployed in separate environments. Both were configured the same way, but only one of them is experiencing this issue.

A few things I've already verified:

I did not configure Distributed Search on the Deployment Server during the initial setup.
As part of troubleshooting, I explicitly set the Distributed Search option to No, but the Agent Management page still fails to load.
I also removed the serverclass.conf file that was originally created through the Splunk Web UI and restarted Splunk, but the issue persists.
I have verified that serverclass.conf does not contain any syntax errors.

The Agent Management page was working previously, and I only noticed this issue recently.

Despite the Agent Management page being unavailable, the Deployment Server itself appears to be functioning normally. Universal Forwarders can still successfully phone home, retrieve deployment apps, and receive configuration updates without any issues.

Has anyone experienced something similar or knows what could cause the Agent Management page to become unavailable while the Deployment Server continues to function normally?

Labels (2)
0 Karma

masonreed11
Explorer

Check splunkd.log and web_service.log for UI/REST errors, then compare the affected server's config and app versions with the working Deployment Server. Since forwarders are still working, it likely points to a Splunk Web or permissions issue rather than the Deployment Server itself.

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @ws 

Check out https://splunk.my.site.com/customer/s/article/Agent-Management-page-not-loading-after-Splunk-Enterpr... to see if this helps - are you using your DS as other functions like a Monitoring Console by any chance? The details in that link suggest the issue would be solved in 10.2.2 but perhaps it wasnt?!

Are there any errors in _internal when you access this page, or are there any web requests with a 500 error in your browser's developer console (network tab)?

🌟 Did this answer help you? If so, please consider:

    • Adding karma to show it was useful
    • Marking it as the solution if it resolved your issue
    • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Federated Search for Snowflake Is Now Generally Available on Splunk Cloud Platform

Splunk is excited to announce the General Availability (GA) of Federated Search for ...

Help Us Build Better Splunk Regex Puzzles (And Win Prizes!)

If you’ve spent any time in the Splunk Community Slack, you’ve likely seen our resident Splunk Trust ...

Fuel Your Journey: What’s Waiting for You at the .conf26 Acceleration Station

Navigating the show floor at .conf26 isn't just about keynotes and technical breakout sessions; it's also ...