topic Re: Rolling restart of Splunk service on linux multiple servers. in Splunk Dev https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476785#M8514 <P>Yes, it's all managed by DS but I do not want to restart them at the same time. So I am looking for a script where it does the rolling restart in this case.</P> Thu, 09 Jan 2020 09:42:59 GMT arunsunny 2020-01-09T09:42:59Z Script for rolling restart of Splunk service on linux multiple servers? https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476781#M8510 <P>Hi</P> <P>I am looking for a script to perform the rolling restart of Splunk service on multiple servers from the Centralised server where it has ssh access to the slave servers.</P> <P>Is anybody have the script?</P> <P>Thanks,<BR />Arun Sunny</P> Wed, 05 Apr 2023 16:52:48 GMT https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476781#M8510 arunsunny 2023-04-05T16:52:48Z Re: Rolling restart of Splunk service on linux multiple servers. https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476782#M8511 <P>Hello-<BR /> We need some more info. What version of Splunk, what server type (Searchhead standalone, cluster searchheads, indexer cluster, etc). </P> <P>If any of this is clustered, and it's the 7.x or 8.x version, you can initiate a SHC rolling restart right from within Splunkweb on any of the SHC members - Settings - Search Head Clustering, then look for the "Begin Rolling Restart" button on the top right. </P> <P>If it's a peer cluster, you will want to run the rolling restart command from any peer or the ClusterMaster. <BR /> <A href="https://docs.splunk.com/Documentation/Splunk/8.0.1/Indexer/Userollingrestart">https://docs.splunk.com/Documentation/Splunk/8.0.1/Indexer/Userollingrestart</A></P> <P>This is the easiest and smoothest way to do a Rolling Restart. I would not use any scripts. </P> <P>Hope this helps,<BR /> Mike </P> Wed, 08 Jan 2020 18:02:21 GMT https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476782#M8511 BainM 2020-01-08T18:02:21Z Re: Rolling restart of Splunk service on linux multiple servers. https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476783#M8512 <P>I am looking at the rolling restart of the endpoint agents. (It's Just a Splunk universal forwarder agent installed on all the endpoints)</P> Thu, 09 Jan 2020 09:34:08 GMT https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476783#M8512 arunsunny 2020-01-09T09:34:08Z Re: Rolling restart of Splunk service on linux multiple servers. https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476784#M8513 <P>Hello, is the UF managed via Deployment servers ? If yes, you can restart them when you push a change from Deployment server using restart flag. </P> <P>If they are not managed by Deployment server, then you can use puppet or chef or ansible depending on your environment to restart UF. </P> Thu, 09 Jan 2020 09:38:41 GMT https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476784#M8513 badrinath_itrs 2020-01-09T09:38:41Z Re: Rolling restart of Splunk service on linux multiple servers. https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476785#M8514 <P>Yes, it's all managed by DS but I do not want to restart them at the same time. So I am looking for a script where it does the rolling restart in this case.</P> Thu, 09 Jan 2020 09:42:59 GMT https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476785#M8514 arunsunny 2020-01-09T09:42:59Z Re: Rolling restart of Splunk service on linux multiple servers. https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476786#M8515 <P>you can create custom server classes and push your configs one at a time (individually for each server class).</P> Thu, 09 Jan 2020 22:26:29 GMT https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476786#M8515 soumyasaha25 2020-01-09T22:26:29Z Re: Rolling restart of Splunk service on linux multiple servers. https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476787#M8516 <P>@soumyasaha25 - I have around 50 endpoints so I can not create 50 serverclass. I am looking for a better approach to push the configs. </P> Thu, 13 Feb 2020 09:58:55 GMT https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/476787#M8516 arunsunny 2020-02-13T09:58:55Z Re: Rolling restart of Splunk service on linux multiple servers. https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/638797#M11011 <P>Hi, did you find any viable solution to this problem ?</P> Wed, 05 Apr 2023 09:11:31 GMT https://community.splunk.com/t5/Splunk-Dev/Script-for-rolling-restart-of-Splunk-service-on-linux-multiple/m-p/638797#M11011 Skerilyo 2023-04-05T09:11:31Z