|
I am going to upgrade from 4.2.4 to 4.3 and the documentation recommends disabling the deployment server first and enabling it last. The problem is my summary jobs live on the same Splunk instance and so leaving the whole thing down while I upgrade five indexers is not feasible. Is there some way to turn off the deployment server without causing all the deployment clients to remove their apps? I found something mentioning running "/opt/splunk/bin/splunk disable deploy-server" but I have no idea what this will actually do and how the deployment clients would behave. Thanks. |
|
not sure if this will work in your scenario, but you could (temporarily) turn up the phoneHomeIntervalInSecs interval on the deployment client side so that the clients won't check in during the time you're doing the upgrade. 1
Would the deployment clients actually remove installed apps if they can no longer contact the DS? Or does the "disable deploy-server" differ in effect from a bad (i.e. blocking) fw-config (as seen from the client). If that is the case, could one not set any fw between the DS and the clients to block incoming requests to port 8089 on the DS? This would still let search jobs run towards the indexers. /k
(06 Feb, 12:05)
kristian.kolb
Clever idea piebob!
(07 Feb, 11:26)
wmosher
|
|
Maybe you want Yes, I mentioned that command in my original post. The help only states "deploy-server disable or enable deployment server capability" which as I noted doesn't tell me what it does. I am trying to ensure this will not cause the deployment clients remove the apps that came from the deployment server.
(07 Feb, 11:15)
wmosher
|
