Deployment Architecture

Forwarder management WARNING icon


Hi all ,
I am having this problem deploying an app, It is a blank app with
local> app and props.conf
metadata > default.meta and local.meta

but i am having this warning icon on the forwarder management
can someone explain me why does it appears ?
All apps are in SPLUNK user.
Thanks in advance
alt text

0 Karma


In the serverclass.conf

what is the value for stateonClient parameter ?

0 Karma


Can you hover over that icon n check whats the error? Also check in _internal logs.

0 Karma


there are no response when i hover it , its just an icon,
and when i run this coomand :
index=_internal sourcetype=splunkd record (New OR Updating) result=Fail | head 100
06-20-2018 23:08:31.260 -0400 WARN ClientSessionsManager - ip=1 name=clustermaster Updating record for sc=vzth_all_prod_idx app=rest_ta: action=Install result=Fail checksum=2007787692849996065

0 Karma
Get Updates on the Splunk Community!

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: CFP Site: CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...