Deployment Architecture

Deployment Server sending deployment apps to a secondary deployment server

rdevine
Path Finder

So i have a setup where i'm trying to replicate a deployment in site1 to a deployment server in site2. I'm getting error messages in the splunkd.log file and am wondering what part of the config i'm missing.

site1 is the primary deployment server and is supposed to replicate its deployment apps to site2.

the folders and files do exist on site2. i'm not sure why i'm getting these error messages.

splunkd.log file on site2 (debug deploymentclient on):
http://pastebin.com/EndRaupc

example error messages from splunkd.log file


02-08-2012 13:29:10.640 -0600 DEBUG DeploymentClient - eRejectAlways rejects: /opt/splunk/etc/apps
02-08-2012 13:29:10.640 -0600 DEBUG DeploymentClient - stateOnClient=disabled
02-08-2012 13:29:10.640 -0600 DEBUG DeploymentClient - eRejectAlways rejects: /opt/splunk/etc/apps
02-08-2012 13:29:10.641 -0600 WARN DeployedApplication - Installing app: winevt to location: /opt/splunk/etc/deployment-apps/winevt
02-08-2012 13:29:10.641 -0600 DEBUG DeploymentClient - stateOnClient=disabled
02-08-2012 13:29:10.648 -0600 ERROR DeployedApplication - Failed to install app : /opt/splunk/etc/deployment-apps/winevt. Application does not exist: winevt
02-08-2012 13:29:10.648 -0600 WARN DeployedServerClass - There was a problem installing app: winevt for server class: DeployRemote

excerpt from site1 serverclass.conf file:

 
[global]
blacklist.0=*

[serverClass:DeployRemote]
whitelist.0=site2
continueMatching = false
stateOnClient=disabled

[serverClass:DeployRemote:app:*]

deploymentclient.conf file on site2


[deployment-client]

repositoryLocation = /opt/splunk/etc/deployment-apps
serverRepositoryLocationPolicy = rejectAlways
reloadDSOnAppInstall = true

[target-broker:deploymentServer]
targetUri = site:8089

0 Karma

wrangler2x
Motivator

Take a look at this Splunk answer and scroll down to the one which references https://gist.github.com/sworisbreathing/d236895568eaf31da579

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...