- Splunk Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Re: Forwarder is unable to download the updated ap...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Forwarder is unable to download the updated app from deployment server
Hi,
Few of our forwarders are unable to download the updated apps from deployment server. Its just showing download failed error.
HTTPClient - Error when reading from uri:
DeployedApplication - Problem downloading from uri=1.2.3.4:8089 to path='/services/streams/deployment?name=default:abc:app_name'
DeployedServerclass - name=abc Failed to download app=app_name
Not able to find any other issue, anywhere else. Would anyone be able to advise something.
Regards,
Kamal
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I’d be checking logs on the forwarder and deployer, checking firewall issues (network monitoring and firewall logs), and checking permissions on both sides. Also I usually avoid spending extra time (beyond obvious stuff ) when it comes to troubleshooting UFs and just reinstall them and let the deployer send them fresh configs.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The older apps are sending data and I also manually created the app on UF and it started sending data without any issue. So, it firewall, network and permissions seem to be fine.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I’d uninstall/reinstall the UF and if that fixes it was likely something corrupted. I’ve had a few of those here and there. Not worth banging your head too much on root cause.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The number of forwarders is huge and is managed by some other team. Re-installing the UFs would be too difficult.
Is there a limit for the UFs a deployment server can handle. Will increasing the poll time be useful ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We have 1200 clients configured. Will increasing the phoneHomeIntervalInSecs make any impact.
Detecting Remote Code Executions With the Splunk Threat Research Team
Enter the Splunk Community Dashboard Challenge for Your Chance to Win!
.conf24 | Session Scheduler is Live!!
