Splunk Enterprise Security

splunk add-on installation on deployment server- commands/installation setups on linxes server CLI commands

kiranhar
New Member

I need to install an updated app on the deployment server, please provide me the steps/commands to install the add-on ( updated app) on the deployment server and then push to other Splunk instances. I am getting the following error when I try to install the updated app on search head directly,

There was an error processing the upload.app=Splunk_TA_juniper is already managed via deployment client; it may not be overridden via search head cluster deployer, UI, CLI, or REST API; remove existing app=Splunk_TA_juniper via deployment server if you wish to install it via any of these other mechanisms

0 Karma
1 Solution

woodcock
Esteemed Legend

Install the app on the Deployment Server through the GUI and configure it as necessary. Then go to the CLI of the DS and move the app from the .../apps/ directory to the .../deployment-apps/ directory, taking care to merge anything in the current app's .../local/ directory with the new app first. Then restart Splunk on the DS.

View solution in original post

0 Karma

woodcock
Esteemed Legend

Install the app on the Deployment Server through the GUI and configure it as necessary. Then go to the CLI of the DS and move the app from the .../apps/ directory to the .../deployment-apps/ directory, taking care to merge anything in the current app's .../local/ directory with the new app first. Then restart Splunk on the DS.

View solution in original post

0 Karma

woodcock
Esteemed Legend

@kiranhar I see in your comment that this worked so do come back and click Accept to close the question.

0 Karma

kiranhar
New Member

Done. Thanks

0 Karma

lloydknight
Builder

Hello @kiranhar

See this link below:
https://docs.splunk.com/Documentation/Splunk/7.3.1/DistSearch/PropagateSHCconfigurationchanges

You're not supposed to deploy apps directly on a Search Head Cluster using the Deployment Server.

Let me know if this is not the case.

Thanks!

0 Karma

kiranhar
New Member

Thanks. The search head is not in a cluster. However, I have followed the process suggested by woodcock and my installation goes smooth. I have verified on Splunk relevant instances after that and Splunk add-on is updated everywhere.

0 Karma

lloydknight
Builder

Hello @kiranhar

are you trying to deploy an add-on using Deployment Server on a Search Head Cluster?

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!