Getting Data In

When are apps being redeployed?

spl_aficionado
Path Finder

This subject keeps baffling us - Can I configure restartSplunkd to true for all applications? 

One thing we saw is that when we bounce the deployment server during the Linux maintenance window, all the apps covered in the serverclasses are being redeployed, I was under the impression that only when we run the following, the hosts associated with this serverclass stanza are being bounced -

splunk reload deploy-server -class <server_class_name> 

Do I miss anything?

Labels (2)
Tags (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

The "reload deploy-server" command is an additional command which makes the DS reload just the serverclasses (and apps). But it's not the only way. Reloading whole DS config includes this part as well.

Of course restarting the instance causes the config to be rebuilt from currently existing files as well.

In fact if you run

splunk reload deploy-server -debug

you'll see that it just calls 

DEBUG (__init__) simpleRequest > POST https://127.0.0.1:8089/services/deployment/server/config/_reload [] sessionSource=direct timeout=360

So it's just a convenient way to call _reload on one of the configuration endpoints. If you reload whole config, this one will get reloaded as well.

0 Karma

kknairr
Contributor

@spl_aficionado Just to bring clarity to this and good observation. When a deployment client connects to the deployment server, Splunk checks the checksum of every app package in the serverclass. If the checksum differs from what the client already has, the app is redeployed. So, after a DS bounce, the clients reestablish their connection and the DS reevaluates all serverclass packages, which can look like a full redeploy cycle. In reality, only apps whose checksums have changed since the last connection are actually pushed, but because the DS has restarted and lost its cached state, it reruns the comparison for every app. Hope it clarifies.

>>

If this post addressed your question, you can:

  • Give it karma to show appreciation 👍
  • Mark it as the solution if it solved your issue ✔️
  • Add a comment if you’d like more details ✏️

Acknowledging helpful answers keeps the community strong and motivates contributors to continue sharing their expertise.

>>

0 Karma

isoutamo
SplunkTrust
SplunkTrust

In my understanding this will update the checksum of apps in this serverclass items. But if there have been some other changes which have earlier updated then also those are checked when DCs’ have connected to DS and normal check has done.

When DC connect to DS it will check checksum of all available packages and then fall which have changed. 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...