Security

Issue pushing config updates on SHC

jeffbat
Path Finder

I am experiencing an issue when I have made updates to the apps on the deployer for a search head cluster and trying to push it out to the nodes.

The issue seems to be hitting on DBConnect but might be that is just the app that it is hitting it on.

The error I am getting is about the file being used by another process.

This is the error:


Error while deploying apps to first member: Error while updating app=splunk_app_db_connect on target=https://dmmsplunksh
03:8089: Non-200/201 status_code=500; {"messages":[{"type":"ERROR","text":"\n In handler 'localapps': Error installing a
pplication: Failed to copy: C:\Splunk\var\run\splunk\bundle_tmp\a1f2000df5b3093c\splunk_app_db_connect to C:\Spl
unk\etc\apps\splunk_app_db_connect. 5 errors occurred. Description for first 5: [{operation:\"renaming .tmp file to d
estination file\", error:\"The process cannot access the file because it is being used by another process.\", src:\"C:\
Splunk\var\run\splunk\bundle_tmp\a1f2000df5b3093c\splunk_app_db_connect\bin\lib\jtds-1.3.1.jar\", dest:\"C:\Sp
lunk\etc\apps\splunk_app_db_connect\bin\lib\jtds-1.3.1.jar\"}, {operation:\"renaming .tmp file to destination file
\", error:\"The process cannot access the file because it is being used by another process.\", src:\"C:\Splunk\var\ru
n\splunk\bundle_tmp\a1f2000df5b3093c\splunk_app_db_connect\bin\lib\rpcserver-all.jar\", dest:\"C:\Splunk\etc\a
pps\splunk_app_db_connect\bin\lib\rpcserver-all.jar\"}, {operation:\"copying contents from source to destination\",
error:\"There are no more files.\", src:\"C:\Splunk\var\run\splunk\bundle_tmp\a1f2000df5b3093c\splunk_app_db_conn
ect\bin\lib\", dest:\"C:\Splunk\etc\apps\splunk_app_db_connect\bin\lib\"}, {operation:\"copying contents from so
urce to destination\", error:\"There are no more files.\", src:\"C:\Splunk\var\run\splunk\bundle_tmp\a1f2000df5b30
93c\splunk_app_db_connect\bin\", dest:\"C:\Splunk\etc\apps\splunk_app_db_connect\bin\"}, {operation:\"copying con
tents from source to destination\", error:\"There are no more files.\", src:\"C:\Splunk\var\run\splunk\bundle_tmp\
a1f2000df5b3093c\splunk_app_db_connect\", dest:\"C:\Splunk\etc\apps\splunk_app_db_connect\"}]"}]}


has anyone seen this before or know how to get around it so I can push out my updates?

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...