Deployment Architecture

How to migrate to a new deployment server?

manderson7
Contributor

I created an "app" on my old deployment server in etc/deployment-apps/ called deployserver, and in it, created the local directory, and in that created deploymentclient.conf. Deploymentclient.conf contains

[deployment-client]
disabled = false

[targer-broker: deploymentServer]
targerUri = newdeployserver.domain.com:8089

[license]
Master_uri = newlicenseserver.domain.com:8089

And when I reload my legacy deployment server, the deployserver app is dropped onto the client. I'm manually restarting the splunkforwarder on the client (something's weird w/ my serverclasses.conf), and when the client comes back up, the new deployment server doesn't see it. Only after I run bin/splunk set deploy-poll newdeployserver.domain.com:8089 and restart, the splunkforwarder does start talking to the new deployment server.

Reading about precedence, I see that etc/system/local/ will take precedence over an app config, but I thought the deployment config app was a possibility.
Has anyone done this, created a deployment server app? How'd you get it to work?
Thanks for any help.

0 Karma

doitslu
Explorer

You could use a dirty hack:

Add a scripted input to your app on the old deployment server and miss use the input script to remove the old deploymentserver config from etc/system/local in case it exists.

Deploy this app down to your clients and all clients should now remove the config from etc/system/local and have a new config within your app.

However you then need to restart the clients to get the new config active e.g. by removing the scripted input on the deployment server, setting restartSplunkd = true and deploying the app again.

Additionally you should also place your configuration app (without the scripted input) on the new deployment Server.

Probably not the best way but a way you could potentially go if you have no other chances. But you should first carefully check with a single test client!

adylent
Path Finder

I believe you need to remove the etc/system/local config, and then ensure you deploy the app to /etc/apps/deploymentserver. If there is a conflict, etc/system/local will always win.

0 Karma

manderson7
Contributor

Thats a bummer. So in fact, I can't go from a non-managed deploy server configuration to a managed deploy server configuration without touching all the boxes, huh?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...