topic Re: Splunk restart for configuration change in Splunk Search

Splunk restart for configuration change

linu1988 — Tue, 02 Jul 2013 08:15:17 GMT

Hello,
We have a master with peers configuration. When we do a configuration change in the indexer we need to restart. All the changes go on correctly. But after sometime we get a message that the Indexer may be down. In alerts we also get " Unable to distribute to peer named Server:8089 at uri Server:8089 because peer has status = "Down" ".

So what is the correct way to restart/ how can we solve this issue in distributed environment?

Re: Splunk restart for configuration change

linu1988 — Tue, 02 Jul 2013 08:51:30 GMT

Thank you for the reply. I was talking about the indexers where its acting as search peers. If i create an index i have to restart the splunkd service alone in that particular server. Will the "splunk reload deploy-client" command able to do the job for me?

Re: Splunk restart for configuration change

linu1988 — Wed, 17 Jul 2013 12:53:40 GMT

As per the splunk documentation We should use the below approach:

splunk rolling-restart cluster-peers

_http://docs.splunk.com/Documentation/Splunk/5.0.3/Indexer/Restartthecluster