<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Manually editing tags.conf in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Manually-editing-tags-conf/m-p/83733#M181997</link>
    <description>&lt;P&gt;Hey all,&lt;/P&gt;

&lt;P&gt;If you were to manually update the tags.conf file and remove a tagging for a specific server, what is needed in order for these changes to show up on the web gui (ie. restart splunk, wait X seconds, manually reload tags.conf, etc.)&lt;/P&gt;

&lt;P&gt;Thanks a lot!&lt;/P&gt;

&lt;P&gt;@mikelanghorst- We deleted a tag from the and it still persists.&lt;/P&gt;

&lt;P&gt;After more testing, I noticed that while tags are immediately written to tags.conf, if I remove it once it has been written it doesn't update the website.  However, if I restart splunk the changes show.  I'm hoping a restart isn't required!&lt;/P&gt;

&lt;P&gt;Does anyone else have insight on this?  It doesn't appear to be updating on search.&lt;/P&gt;</description>
    <pubDate>Thu, 29 Sep 2011 20:38:37 GMT</pubDate>
    <dc:creator>dayrobertj</dc:creator>
    <dc:date>2011-09-29T20:38:37Z</dc:date>
    <item>
      <title>Manually editing tags.conf</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Manually-editing-tags-conf/m-p/83733#M181997</link>
      <description>&lt;P&gt;Hey all,&lt;/P&gt;

&lt;P&gt;If you were to manually update the tags.conf file and remove a tagging for a specific server, what is needed in order for these changes to show up on the web gui (ie. restart splunk, wait X seconds, manually reload tags.conf, etc.)&lt;/P&gt;

&lt;P&gt;Thanks a lot!&lt;/P&gt;

&lt;P&gt;@mikelanghorst- We deleted a tag from the and it still persists.&lt;/P&gt;

&lt;P&gt;After more testing, I noticed that while tags are immediately written to tags.conf, if I remove it once it has been written it doesn't update the website.  However, if I restart splunk the changes show.  I'm hoping a restart isn't required!&lt;/P&gt;

&lt;P&gt;Does anyone else have insight on this?  It doesn't appear to be updating on search.&lt;/P&gt;</description>
      <pubDate>Thu, 29 Sep 2011 20:38:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Manually-editing-tags-conf/m-p/83733#M181997</guid>
      <dc:creator>dayrobertj</dc:creator>
      <dc:date>2011-09-29T20:38:37Z</dc:date>
    </item>
    <item>
      <title>Re: Manually editing tags.conf</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Manually-editing-tags-conf/m-p/83734#M181998</link>
      <description>&lt;P&gt;tags.conf is read at search time, when I add tags via the config file they are available immediately.&lt;/P&gt;</description>
      <pubDate>Thu, 29 Sep 2011 20:45:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Manually-editing-tags-conf/m-p/83734#M181998</guid>
      <dc:creator>mikelanghorst</dc:creator>
      <dc:date>2011-09-29T20:45:42Z</dc:date>
    </item>
  </channel>
</rss>

