Monitoring Splunk

Can't Disable Deployment Monitor

rtkelly
Explorer

When I try to disable the Deployment Monitor from the Manager, I get the following error:

Error occurred attempting to disable SplunkDeploymentMonitor: In handler 'localapps': Cannot update application info: /nobody/SplunkDeploymentMonitor/app/install/state = disabled: Could not flush changes to disk: /nobody/system: ConfPathMapper: /apps/splunk/etc/apps/SplunkDeploymentMonitor/local.

I'm sure that I could disable it from the conf files and then restart, but what does this mean?
I'm running Splunk 4.2.4 on RH Linux.

0 Karma
1 Solution

kristian_kolb
Ultra Champion

Have you checked that you have enough permissions (i.e. 'write') on the apps/SplunkDeploymentMonitor directory (and subdirectories). I seem to recall that I've come across similar errors when trying to enable the DeploymentMontior.

hope this helps

/k

View solution in original post

0 Karma

kristian_kolb
Ultra Champion

Have you checked that you have enough permissions (i.e. 'write') on the apps/SplunkDeploymentMonitor directory (and subdirectories). I seem to recall that I've come across similar errors when trying to enable the DeploymentMontior.

hope this helps

/k

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...