Deployment Architecture

Temporarily disable deployment server?

wmosher
Path Finder

I am going to upgrade from 4.2.4 to 4.3 and the documentation recommends disabling the deployment server first and enabling it last. The problem is my summary jobs live on the same Splunk instance and so leaving the whole thing down while I upgrade five indexers is not feasible.

Is there some way to turn off the deployment server without causing all the deployment clients to remove their apps? I found something mentioning running "/opt/splunk/bin/splunk disable deploy-server" but I have no idea what this will actually do and how the deployment clients would behave.

Thanks.

1 Solution

piebob
Splunk Employee
Splunk Employee

not sure if this will work in your scenario, but you could (temporarily) turn up the phoneHomeIntervalInSecs interval on the deployment client side so that the clients won't check in during the time you're doing the upgrade.

View solution in original post

jspears
Communicator

Maybe you want $SPLUNK_HOME/bin/splunk disable deploy-server. See '$SPLUNK_HOME/bin/splunk help disable'

wmosher
Path Finder

Yes, I mentioned that command in my original post. The help only states "deploy-server disable or enable deployment server capability" which as I noted doesn't tell me what it does. I am trying to ensure this will not cause the deployment clients remove the apps that came from the deployment server.

0 Karma

bramuno
Engager

if all you want is to know what happens when you run a command, you could just spin up a VM and run the command.  that's literally what DEV environments are for...

[splunk@ClientMachine bin]$ ./splunk disable deploy-server
Your session is invalid. Please login.
Splunk username: admin
Password:
Login successful, running command...
Deployment Server is disabled.
[splunk@ClientMachine bin]$

0 Karma

kristian_kolb
Ultra Champion

Would the deployment clients actually remove installed apps if they can no longer contact the DS? Or does the "disable deploy-server" differ in effect from a bad (i.e. blocking) fw-config (as seen from the client).

If that is the case, could one not set any fw between the DS and the clients to block incoming requests to port 8089 on the DS? This would still let search jobs run towards the indexers.

/k

piebob
Splunk Employee
Splunk Employee

not sure if this will work in your scenario, but you could (temporarily) turn up the phoneHomeIntervalInSecs interval on the deployment client side so that the clients won't check in during the time you're doing the upgrade.

wmosher
Path Finder

Clever idea piebob!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...