Deployment Architecture

Force deployment to clients?

smisplunk
Path Finder

Is it possible to force the deployment server to update its clients in a "push" style? According to the example listed here in the deployment docs, using the command

splunk reload deploy-server

should indicate to known clients that the class has been updated. Does this act like a "push"? Is there any delay in when the client will request the new configs?

Tags (1)
0 Karma
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

This does not act as a push, and Deployment Server (as of 4.0) is always a client-initiated poll. What the command does it force the server to reload the configuration and content from the files currently on the filesystem, rather than what it read at the last reload. The next checkin from the client will occur at the regularly client-scheduled time (since it doesn't know anything about the reload), but at that time, it will receive updated information.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

This does not act as a push, and Deployment Server (as of 4.0) is always a client-initiated poll. What the command does it force the server to reload the configuration and content from the files currently on the filesystem, rather than what it read at the last reload. The next checkin from the client will occur at the regularly client-scheduled time (since it doesn't know anything about the reload), but at that time, it will receive updated information.

kristian_kolb
Ultra Champion

Perhaps restarting the client makes that happen. Unfortunately it seems like there is no 'splunk connect-to deployment-server' command. At any rate, you'd have to do it from the the forwarder (i.e. client) end. Restarting a forwarder will most likely only take a few seconds.

Other than that, I think you'd want to have the deployment clients check in fairly often, and I haven't (yet) come across an installation where changing the default value has been deemed necessary.

/k

0 Karma

Glenn
Builder

Is there any way to force the client to initiate a poll? Say your check in period was 1 day, but you don't want to wait for it to check in for an urgent change.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...