Deployment Architecture

After creating and deploying an app via deployment server, why do not see any data coming in?

KVinodh
New Member

Hi all,

I created a new deployment app. I edited my app.conf, input.conf, output.conf and serverclass.conf & also redeployed splunk the deployment server and everything is perfect. After creating the deployment app, I am able to see the same application in the slave servers and also the deploymentclient.conf is correct in them. But I am not able to see any data in Splunk from those sources. I am totally confused and unable to move further. Any idea what I am missing here?

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

If you didnt set restartsplunkd = true in the App configuration in the serverclass.conf, you will need to restart the Client manually after it is deployed.

See restartsplunkd in : http://docs.splunk.com/Documentation/Splunk/6.1/admin/Serverclassconf

0 Karma

somesoni2
Revered Legend

Did you check the directories/files being monitored are available on the slave servers?? Also, run following command on the slave servers and see if you see your configured monitor inputs listed

From $SPLUNK_HOME\bin

splunk list monitor -auth admin:password
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...