Splunk Enterprise

Forwarder Management UI error on new install 9.4.0

TheJagoff
Communicator

On a new install of Splunk Enterprise 9.4.0 on the intended Deployment Server

Settings ==> Forwarding Management

We get the following:

Forwarder Management unavailable

There is an error in your serverclass.conf which is preventing deployment server from initializing. Please see your serverclass.conf.spe file for more information.

 

This is the first time that I've seen this in the years that I've been Splunking and the only serverclass.conf file is from the installation in $SPLUNK_HOME/etc/system/default.

What am I missing? Help, please

Labels (2)
0 Karma

keithwdesantis
Explorer

I am also seeing this issue. Any updates/solutions you've found? I've tried removing "restartSplunkWeb" from my app stanza declarations and made sure all the apps in the serverclass.conf exist in deplyoment-apps, but I'm still seeing that same error on forwarder management:

 

Forwarder management unavailable

 

There is an error in your serverclass.conf which is preventing deployment server from initializing. Please see your serverclass.conf.spec for more information.

0 Karma

TheJagoff
Communicator

No response for this issue from Splunk. I am probably going to write a bug report this week and see if that gets any traction.

0 Karma

keithwdesantis
Explorer

I put in a support case and got a response. Seems like this is a known issue with 9.4.0.

I followed the resolution steps here and it seems to have worked for me. Had to do with the /etc/hosts file on the host machine.

https://splunk.my.site.com/customer/s/article/After-upgrading-Splunk-from-v9-2-to-v9-4-the-Forwarder...

0 Karma

nbonner
Explorer

We also have this issue after upgrading to 9.4.0.  Deployment server still works at deploying apps so we have been ignoring it.  A solution would be nice though.

0 Karma

TheJagoff
Communicator

I'm the only one with this issue?

Ok, we made the decision to wipe the installations clean and installed 9.3.2.
Configured deploymentclient.conf for several instances, the UI is now working fine.

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...