Deployment Architecture

Why am I getting "Assertion `tresult.token != ((void *)0)' failed. Aborted" trying to configure a deployment client to point at my deployment server?

akelly4
Path Finder

I'm trying to configure a splunkforwarder so it is pointed at my deployment server

When I run the following command, I get this error:

set deploy-poll deploymentserver:8089

./splunk set deploy-poll deploymentserver:8089
splunk: /home/build/build-src/6.2.1/src/launcher/restcall.c:545: make_simple_rest_call_online: Assertion `tresult.token != ((void *)0)' failed.
Aborted

Any clue what causes this or what I should look at?

0 Karma

cmeo
Contributor

try removing ~/.splunk/authToken[yourhost]_[yourport], worked for me.

I saw this error for the first time today. It seems to be a new thing with splunk 6.x. Any comments from Splunk engineers about what gives with this?

cmeo
Contributor

PS strace is your friend...

0 Karma

charter1977
New Member

here is the exact call I try:

# bin/splunk list monitor
splunk: /home/build/build-src/6.2.0/src/launcher/restcall.c:545: make_simple_rest_call_online: Assertion `tresult.token != ((void *)0)' failed.
Aborted

Thanks

0 Karma

charter1977
New Member

Hi,
I receive same error on my setup splunk.

Someone know why this happen. Nothing change on my setup and it stop working.

Unable to do CLI commands..

Thanks

0 Karma

somesoni2
Revered Legend

How about using the configuration files and restarting the Splunk forwarder?

/opt/splunkforwarder/etc/system/local/deploymentclient.conf

[target-broker:deploymentServer]
targetUri = IPAddressOfYourServerHere:8089

Also, check if you can ping deployment server from your forwarder server.

0 Karma

akelly4
Path Finder

I added that conf file and restarted splunk there aren't any errors messages showing in the splunkd log but It's also still not checking in to my deployment server.

I already verified the deployment server is setup and 8089 is open.

0 Karma

masonmorales
Influencer

Strange error. Did you already start Splunk? Also, maybe try putting quotation marks around the deployment server and adding your authentication info?

i.e.
/opt/splunkforwarder/bin/splunk start --accept-license --answer-yes
/opt/splunkforwarder/bin/splunk set deploy-poll "deploymentserver:8089" -auth admin:changeme

0 Karma

akelly4
Path Finder

I'm getting the same error when I run the set deploy-poll command you have.

0 Karma

masonmorales
Influencer

Try what @somesoni2 suggested?
vi $SPLUNK_HOME/etc/system/local/deploymentclient.conf

[target-broker:deploymentServer]
targetUri = IPAddressOfYourServerHere:8089

Hit ESC, :wq, Enter
Restart Splunk, then check splunkd.log and report back

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...