topic Re: How to reload Global savedsearches in Reporting

How to reload Global savedsearches

sdaa — Thu, 04 Nov 2010 22:20:10 GMT

If I have saved my searches globally, ie in the file

$SPLUNK_HOME/apps/search/local/savedsearches.conf

is it then possible to reload changes somehow?

I have tried several restart/reload options but none seem to work.

splunk _internal call /services/admin/search/data/ui/nav?refresh=1
splunk _internal call /services/apps//
splunk restartss

Obviously if I edit them in the GUI, they will be reloaded but I have changed names to them and would like the new names to appear.

Re: How to reload Global savedsearches

ziegfried — Thu, 04 Nov 2010 22:44:48 GMT

You can use this command to reload the saved searches:

splunk _internal call "/admin/savedsearch/_reload"

or via Splunkweb visit the URI /debug/refresh?entity=admin/savedsearch

eg. http://localhost:8000/debug/refresh?entity=admin/savedsearch

Re: How to reload Global savedsearches

sdaa — Fri, 12 Nov 2010 16:26:17 GMT

The internal call needed to like this: splunk _internal call /servicesNS/admin/search/admin/savedsearch/_reload -auth username to work. But the web link was useful, it reloads everything. https://servername/en-US/debug/refresh

Re: How to reload Global savedsearches

mpatnode — Wed, 17 Nov 2010 03:37:39 GMT

How do I reload the savedsearch.conf for my specific app?

Re: How to reload Global savedsearches

tonopahtaos — Fri, 04 May 2012 21:40:44 GMT

This works for my app savedsearches.conf too.

Re: How to reload Global savedsearches

tonopahtaos — Fri, 04 May 2012 21:42:45 GMT

I mean the web link works for my app's savedsearches.conf