Deployment Architecture

Help with Deployment Server and Client? Step-bystep available?

twinspop
Influencer

I've read through the docs and come up with a simple test config:

st1:

  • Deployment Server
  • $SPLUNK_HOME/etc/deployment-apps contains testapp, which has defaults/inputs.conf and defaults/outputs.conf
  • $SPLUNK_HOME/etc/system/local/serverclass.conf has

    [serverClass:testapp]
    [serverClass:testapp:app:*]
    filterType = whitelist
    whitelist.0 = st2
    restartSplunkd = true

  • splunk list deploy-clients shows

    Deployment client: ip=172.16.111.129, dns=st2, hostname=st2, mgmt=8089, build=98164, name=st2, id=connection_172.16.111.129_8089_st2_st2_st2, utsname=linux-x86_64
    utsname: linux-x86_64
    name: st2
    ip: 172.16.111.129
    hostname: st2
    build: 98164
    dns: st2
    mgmt: 8089
    phoneHomeTime: Thu May 19 09:13:22 2011
    id: connection_172.16.111.129_8089_st2_st2_st2

st2:

  • Deployment client
  • $SPLUNK_HOME/etc/system/local/deploymentclient.conf contains

    [deployment-client]

    clientName=st2

    [target-broker:deploymentServer]

    targetUri = st1:8089

st2 never gets testapp deployed to it. I've had a support ticket open for 8 days on this with no luck. What did I leave out?

Thanks,

jon

Tags (1)
1 Solution

bwooden
Splunk Employee
Splunk Employee

Try prepending your serverclass.conf with an empty global stanza. Whitelist is the default filter type so you may omit it if you'd like:

[global]

[serverClass:testapp] 

[serverClass:testapp:app:*] 
whitelist.0 = st2 
restartSplunkd = true

Alternate serverclass.conf...

[global]

[serverClass:testClass]
whitelist.0 = st2
restartSplunkd = true

[serverClass:testClass:app:testapp]

View solution in original post

bwooden
Splunk Employee
Splunk Employee

Try prepending your serverclass.conf with an empty global stanza. Whitelist is the default filter type so you may omit it if you'd like:

[global]

[serverClass:testapp] 

[serverClass:testapp:app:*] 
whitelist.0 = st2 
restartSplunkd = true

Alternate serverclass.conf...

[global]

[serverClass:testClass]
whitelist.0 = st2
restartSplunkd = true

[serverClass:testClass:app:testapp]

twinspop
Influencer

I just noticed that the alternate code you posted above had testClass in the stanza opening. That did the trick. Yahtzee!

twinspop
Influencer

Nothing. Kinda frustrating. I've had a ticket open for 10 days now, with no activity since Monday. There's no step-by-step on the doc site. I guess I'm mentally deficient since others have it working, but it sure seems like I've got the min requirements. Thanks for trying.

0 Karma

bwooden
Splunk Employee
Splunk Employee

It is interesting you're seeing the deployment client listed as phoning home via deployment server but not seeing it pick up any apps. Do you see any relevant information in splunkd.log?

0 Karma

twinspop
Influencer

Yes, and also 'splunk restart'. On both ends.

0 Karma

bwooden
Splunk Employee
Splunk Employee

Did you perform a 'splunk reload deploy-server' after editing serverclass.conf?

0 Karma

twinspop
Influencer

typos in original post fixed.

0 Karma

twinspop
Influencer

st1: deployment-apps. st2 - yes, big typo there on my part. editing the orig. (as in, post is wrong, install is correct)

0 Karma

bwooden
Splunk Employee
Splunk Employee

Actually - I see where you reported st2 was phoning home to st1, which answers my 2nd question.

0 Karma

bwooden
Splunk Employee
Splunk Employee

Regarding st2: Is your deploymentclient configuration in "$SPLUNK_HOME/etc/system/local/serverclass.conf" or "$SPLUNK_HOME/etc/system/local/deploymentclient.conf". That is as equally as important as the above hyphen comment.

0 Karma

bwooden
Splunk Employee
Splunk Employee

In the same vein, did you intend to write "$SPLUNK_HOME/etc/system/local/serverclass.conf contains" or "$SPLUNK_HOME/etc/system/local/deploymentclient.conf contains". It should be the latter and is as important as the hyphen in my above comment.

0 Karma

bwooden
Splunk Employee
Splunk Employee

Regarding st1: Is your app literally in "$SPLUNK_HOME/etc/deploymentapps/testapp" or is it in "$SPLUNK_HOME/etc/deployment-apps/testapp"? The hyphen is important but I thought perhaps that was a typo in your initial question.

0 Karma

twinspop
Influencer

No change.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...