Deployment Architecture

deployment server debug..

a212830
Champion

Hi,

I'm trying to push out some new configs via the deployment server, but they aren't working. I turned on debug on the client, and I see the following. Can someone decipher this for me?

02-02-2013 22:12:43.143 -0500 DEBUG DeploymentClient - PhoneHomeThread woke up
02-02-2013 22:12:43.143 -0500 DEBUG DeploymentClient - Send phone home
02-02-2013 22:12:43.466 -0500 DEBUG DeploymentClient - Current state: 3, new state: 4
02-02-2013 22:12:43.466 -0500 DEBUG DeploymentClient - Phone home recvd reply: <?xml version="1.0" encoding="UTF-8"?>\n\n
02-02-2013 22:12:43.466 -0500 DEBUG DeploymentClient - DeploymentClient is about to reload a new manifest....
02-02-2013 22:12:43.466 -0500 DEBUG DeploymentClient - DeploymentClient is done reloading...
02-02-2013 22:12:43.466 -0500 DEBUG DeploymentClient - Current state: 4, new state: 3

Tags (1)
0 Karma

lguinn2
Legend

Okay, it looks like you have set

restartSplunkd = False

in serverclass.conf for this client (or perhaps that is the default for this client). So when the client downloads the app, it doesn't restart splunkd. Therefore, the new app/configs do not take effect. You might want to change that.

You might not have needed to turn on debug. If you had searched the _internal index, you would probably have found much the same thing. Or at least you would have been able to see that the app was being deployed. I like to use a search like this:

index=_internal deployedapplication OR serverclass OR packagedownloadresthandler sourcetype=splunkd 
| table _time host component log_level message

To test that this was the only problem, go to the client and see if the app appears. If yes, then restart splunkd. If that fixes the problem, then this was it!

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...