Refine your search:

Receiving this error in splunkd.log. I can see the bundle file deployed. However I receive this error in splunkd.log.

scName=FWDR1, appName=inputsapp, fqname=/home/rickrob/splunkforwarder/etc/apps/inputsapp, event=install, status=failed, reason=Failed to install app : /home/rickrob/splunkforwarder/etc/apps/inputsapp. Cannot update application info: /nobody/inputsapp/app/install/state = enabled: Metadata could not be written: /nobody/inputsapp/app/install/state: { }, removable: yes

Changes in the file to be deployed in $SPLUNK_HOME/etc/deployment-apps/local/inputs.conf are not being picked up . Ive checked permissions .... any help appreciated.

asked 15 Dec '11, 12:10

rroberts's gravatar image

rroberts
1.7k218
accept rate: 44%


One Answer:

Found it. Must have metadata folder in repository with default.meta and local.meta files.
scName=FWDR1, appName=testme, fqname=, event=download, status=ok, reason=
scName=FWDR1, appName=inputfwd, fqname=/home/rickrob/splunkforwarder/etc/apps/inputfwd, event=uninstall, status=ok, reason=

link

answered 16 Dec '11, 06:16

rroberts's gravatar image

rroberts
1.7k218
accept rate: 44%

edited 16 Dec '11, 07:45

Is there any reason for this?

I had a very similar problem which was fixed in with the same method. But others I have spoken to have not had this problem.

(09 Jan '12, 14:25) MHibbin

I manually created the app folders instead of building from an app template. The template created the local.meta file for me. I left out the meta file when I created manaully.

(09 Jan '12, 16:14) rroberts
Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×168

Asked: 15 Dec '11, 12:10

Seen: 940 times

Last updated: 09 Jan '12, 16:14

Copyright © 2005-2012 Splunk Inc. All rights reserved.