I have an app that gets deployed immediately to newly installed forwarders that only contains 2 scripts (one for *Nix and one for Windows) and an inputs.conf. The scripts are called to to remove deploymentclient.conf and outputs.conf from etc/system/local as we have another app used to create those configurations.
This app with the scripts is only temporarily deployed until the client name is updated in the configs and then is removed via being filtered out in server classes. The issue is after this app is removed I am seeing an error message:
ERROR ExecProcessor - message from "/opt/splunkforwarder/etc/apps/<_app>/bin/remove_file.sh" /bin/sh: /opt/splunkforwarder/etc/apps/<_app>/bin/remove_file.sh: No such file or directory
I have found that restarting the forwarder resolves this issue and would like a way to automate this in our process. Is there a way to trigger a restart once this app is removed?
↧