In Deployment Monitor App, App's search command use [ index="_internal" source="*metrics.lo*" group=tcpin_connections ]
logs to analyze Deployment Client status.
In Splunk 6.1.3, I couldn't get any logs by using [ index="_internal" source="*metrics.lo*" group=tcpin_connections ]
search command on Deployment Server.
Is there [ index="_internal" source="*metrics.lo*" group=tcpin_connections ]
log in Splunk 6.1.3 ?
How to fix this issue for Deployment Monitor App???
The backing data is still in metrics.log as per always. One possibility is you don't have any incoming connections because of some other problem.
Splunk Deployment Monitor has gone somewhat unmaintained for a while, so if you updated from say 6.0.x to 6.1.3, it's possible something nonobvious is not working right.