Deployment Architecture

Restart all Forwarders at once using DM?

sathiyasun
Explorer

I was using DM and a app to restart all the forwarders at once but it stopped working
Click on restart then save its not restarting the FW's. Please advice.

Tags (1)
0 Karma

maciep
Champion

Just to be sure I understand, you are using a deployment server? And you have an app, maybe like a "dummy" app, that you use to push splunk restarts to your forwarders? But now that's not working?

If that's the case, is the app and all of the forwarders still associated with a server class? Are the forwarders still checking in, and downloading other app changes? Are you actually making changes to the contents of restart app before saving it? If the contents haven't changed, then maybe splunk thinks no changes need downloaded, and therefore no restart is necessary.

Also, maybe the splunk version of your ds and forwarders could be helpful (maybe there's a known bug). And of course, if anything changed in your env between when it did work and now, that would be good to know.

0 Karma

ppablo
Retired

Hi @sathiyasun

What are you referring to when you say "DM"?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...