Splunk Enterprise

Forwarder Management UI error on new install 9.4.0

TheJagoff
Communicator

On a new install of Splunk Enterprise 9.4.0 on the intended Deployment Server

Settings ==> Forwarding Management

We get the following:

Forwarder Management unavailable

There is an error in your serverclass.conf which is preventing deployment server from initializing. Please see your serverclass.conf.spe file for more information.

 

This is the first time that I've seen this in the years that I've been Splunking and the only serverclass.conf file is from the installation in $SPLUNK_HOME/etc/system/default.

What am I missing? Help, please

Labels (2)
0 Karma

keithwdesantis
Explorer

I am also seeing this issue. Any updates/solutions you've found? I've tried removing "restartSplunkWeb" from my app stanza declarations and made sure all the apps in the serverclass.conf exist in deplyoment-apps, but I'm still seeing that same error on forwarder management:

 

Forwarder management unavailable

 

There is an error in your serverclass.conf which is preventing deployment server from initializing. Please see your serverclass.conf.spec for more information.

0 Karma

TheJagoff
Communicator

No response for this issue from Splunk. I am probably going to write a bug report this week and see if that gets any traction.

0 Karma

keithwdesantis
Explorer

I put in a support case and got a response. Seems like this is a known issue with 9.4.0.

I followed the resolution steps here and it seems to have worked for me. Had to do with the /etc/hosts file on the host machine.

https://splunk.my.site.com/customer/s/article/After-upgrading-Splunk-from-v9-2-to-v9-4-the-Forwarder...

0 Karma

nbonner
Explorer

We also have this issue after upgrading to 9.4.0.  Deployment server still works at deploying apps so we have been ignoring it.  A solution would be nice though.

0 Karma

TheJagoff
Communicator

I'm the only one with this issue?

Ok, we made the decision to wipe the installations clean and installed 9.3.2.
Configured deploymentclient.conf for several instances, the UI is now working fine.

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Observability - October 2025

What’s New?  We’re excited to announce the latest enhancements to Splunk Observability Cloud and share what’s ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened Audit Trail v2 wasn’t written in isolation—it was shaped by your voices. In ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...