Hi,
Are there any logfiles that show the deployment server attempting to push changes out (or, on the other side, in?) I made some changes, but they are not getting pushed out. The connection between the server and client is there, but nothing gets pushed when I reload the server.
Yes, and they are all splunked. You can find them by searching the _internal index. Additionally, forwarders send their key logs to the indexer, so you see both "sides" of the deployment server / deployment client interaction.
Here are some searches that I like to use:
index=_internal component=deploy* OR component=serverclass sourcetype=splunkd
| fields host component log_level message
| table _time host component log_level message
index=_internal sourcetype=splunkd component=Metrics group=ds_connections* |
rename ip as deploymentClient mgmt as mgmtPort |
fields deploymentClient mgmtPort utsname dsevent |
table _time deploymentClient mgmtPort utsname dsevent