All Apps and Add-ons

Restart a splunk app via script

yAlff
Path Finder

Unfortunately our installation of the AMQP Modular Messaging Input App stops running because of not enough memory every night. To workaround here, we set up a trigger, which should start a script that restarts the Splunk app. Is there a way to restart a splunk app via CLI?

0 Karma
1 Solution

fdi01
Motivator

try the following from SPLUNK_HOME/bin:

./splunk  _internal call /services/apps/local/your_application_name/_reload -auth admin:$ADMINPWD

Hope it helps.

View solution in original post

Tags (1)

Damien_Dallimor
Ultra Champion

Why not address the root cause.

Add more memory , browse to the JVM Heap Size section in the docs : https://splunkbase.splunk.com/app/1812/#/documentation

Or consider scaling out your architecture because you are likely processing high volume ie: more AMQP modular inputs deployed over multiple Forwarders.See slides 20/21 : http://www.slideshare.net/damiendallimore/splunk-conf-2014-getting-the-message

yAlff
Path Finder

I will test it. But I'm wondering if this is the cause. The app always stops working at midnight. Should rather stop after memory is full, shouldn't it?
I will observe it with some tools and produce a protocol.

0 Karma

muebel
SplunkTrust
SplunkTrust

Yeah, this is probably the obvious answer.

0 Karma

ddrillic
Ultra Champion
0 Karma

fdi01
Motivator

try the following from SPLUNK_HOME/bin:

./splunk  _internal call /services/apps/local/your_application_name/_reload -auth admin:$ADMINPWD

Hope it helps.

Tags (1)

yAlff
Path Finder

Thanks! The following worked for me:
splunk _internal call /apps/local/your_application_name/_reload

I'm running Splunk on Windows. The only difference now is the missing /services in the beginning. Splunk added it by itself. Don't know, if it has to do that splunk is running on Windows.

0 Karma

muebel
SplunkTrust
SplunkTrust

Hi yAlff, absolutely, you can execute the Splunk binary passing the restart paramater like:

$SPLUNK_HOME/bin/splunk restart #nix
"%PROGRAMFILES%\splunk\bin\splunk.exe" restart #windows batch
"$env:programfiles\splunk\bin\splunk.exe" restart #windows powershell

or the splunk controlling service

service splunk restart #nix pre systemd
systemctl restart splunk #nix systemd
restart-service *splunk* #powershell

Please let me know if this answers your question!

0 Karma

yAlff
Path Finder

I downvoted this post because this is how to restart splunk. i want to restart an applikation installed in splunk, as it is written in the question.

0 Karma

muebel
SplunkTrust
SplunkTrust

A Splunk "application" (more appropriately, add-on) is really just an extension of Splunk. It can be thought of additional configuration. There isn't a method of "restarting" an app. You might some help by reloading that particular apps configuration as mentioned in another answer, but otherwise the you have a deeper problem with the modular input, that I expect only loads at Splunk startup.

0 Karma

asimagu
Builder

you cannot restart an application without restarting Splunk....

0 Karma

yAlff
Path Finder

@asimagu: why not?

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...