Splunk Enterprise

Forwarder Management UI error on new install 9.4.0

TheJagoff
Communicator

On a new install of Splunk Enterprise 9.4.0 on the intended Deployment Server

Settings ==> Forwarding Management

We get the following:

Forwarder Management unavailable

There is an error in your serverclass.conf which is preventing deployment server from initializing. Please see your serverclass.conf.spe file for more information.

 

This is the first time that I've seen this in the years that I've been Splunking and the only serverclass.conf file is from the installation in $SPLUNK_HOME/etc/system/default.

What am I missing? Help, please

Labels (2)
0 Karma

keithwdesantis
Explorer

I am also seeing this issue. Any updates/solutions you've found? I've tried removing "restartSplunkWeb" from my app stanza declarations and made sure all the apps in the serverclass.conf exist in deplyoment-apps, but I'm still seeing that same error on forwarder management:

 

Forwarder management unavailable

 

There is an error in your serverclass.conf which is preventing deployment server from initializing. Please see your serverclass.conf.spec for more information.

0 Karma

TheJagoff
Communicator

No response for this issue from Splunk. I am probably going to write a bug report this week and see if that gets any traction.

0 Karma

keithwdesantis
Explorer

I put in a support case and got a response. Seems like this is a known issue with 9.4.0.

I followed the resolution steps here and it seems to have worked for me. Had to do with the /etc/hosts file on the host machine.

https://splunk.my.site.com/customer/s/article/After-upgrading-Splunk-from-v9-2-to-v9-4-the-Forwarder...

0 Karma

nbonner
Explorer

We also have this issue after upgrading to 9.4.0.  Deployment server still works at deploying apps so we have been ignoring it.  A solution would be nice though.

0 Karma

TheJagoff
Communicator

I'm the only one with this issue?

Ok, we made the decision to wipe the installations clean and installed 9.3.2.
Configured deploymentclient.conf for several instances, the UI is now working fine.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...