Splunk Enterprise

Forwarder Management UI error on new install 9.4.0

TheJagoff
Communicator

On a new install of Splunk Enterprise 9.4.0 on the intended Deployment Server

Settings ==> Forwarding Management

We get the following:

Forwarder Management unavailable

There is an error in your serverclass.conf which is preventing deployment server from initializing. Please see your serverclass.conf.spe file for more information.

 

This is the first time that I've seen this in the years that I've been Splunking and the only serverclass.conf file is from the installation in $SPLUNK_HOME/etc/system/default.

What am I missing? Help, please

Labels (2)
0 Karma

keithwdesantis
Explorer

I am also seeing this issue. Any updates/solutions you've found? I've tried removing "restartSplunkWeb" from my app stanza declarations and made sure all the apps in the serverclass.conf exist in deplyoment-apps, but I'm still seeing that same error on forwarder management:

 

Forwarder management unavailable

 

There is an error in your serverclass.conf which is preventing deployment server from initializing. Please see your serverclass.conf.spec for more information.

0 Karma

TheJagoff
Communicator

No response for this issue from Splunk. I am probably going to write a bug report this week and see if that gets any traction.

0 Karma

keithwdesantis
Explorer

I put in a support case and got a response. Seems like this is a known issue with 9.4.0.

I followed the resolution steps here and it seems to have worked for me. Had to do with the /etc/hosts file on the host machine.

https://splunk.my.site.com/customer/s/article/After-upgrading-Splunk-from-v9-2-to-v9-4-the-Forwarder...

0 Karma

nbonner
Explorer

We also have this issue after upgrading to 9.4.0.  Deployment server still works at deploying apps so we have been ignoring it.  A solution would be nice though.

0 Karma

TheJagoff
Communicator

I'm the only one with this issue?

Ok, we made the decision to wipe the installations clean and installed 9.3.2.
Configured deploymentclient.conf for several instances, the UI is now working fine.

0 Karma
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...