All Apps and Add-ons

Splunk add-on asking for restart during first time installation

MustakMU
Loves-to-Learn

We recently upgraded our add-on to use tls1.2 and python3, by following this blog this blog post.

Link 

After upgrading, during first time time installation, the splunk server is asking for restart, earlier it never used to ask for restart during first time, only when we upgrade the app it used to ask for restart.
Also I'm not using input.conf file in my add-on 

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @MustakMU 

Did you make any changes to app.conf between the old version of your app and new version?

Did you try installing the old version of the app on the same version of Splunk that you are using now to install the new version? If so you can confirm the old one did not ask for a restart?

It might help to post your app.conf as some settings here can cause a restart.

 

🌟 Did this answer help you? If so, please consider:

  • Adding kudos to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing.

0 Karma

MustakMU
Loves-to-Learn

Hi @livehybrid 
Could you please help me out with this issue?
Thanks

Tags (1)
0 Karma

MustakMU
Loves-to-Learn

Hi @livehybrid 
Thanks for replay, Yes I did change the app.conf, the only change which I did was update version number of app and yes, previous version of app is not asking for any restart
this is my app.conf

# this add-on is powered by splunk Add-on builder
[install]
state_change_requires_restart = false
is_configured = 0
state = enabled
build = 1

[launcher]
author = My_company
version = 1.8.3
description = This add-on allows integration for Splunk.

[ui]
is_visible = 1
label = Add-on for Splunk
docs_section_override = AddOns:released

[package]
id = TA-add-on-for-splunk

[triggers]
reload.addon_builder = simple
reload.ta_entrust_datacard_intellitrust_add_on_for_splunk_account = simple
reload.ta_entrust_datacard_intellitrust_add_on_for_splunk_settings = simple
reload.passwords = simple

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @MustakMU 

There isnt anything obvious in there which would trigger a restart, infact the opposite! It doesnt mean that there isnt something else in the app though which would cause a restart. 

Its worth reviewing https://docs.splunk.com/Documentation/Splunk/9.4.1/Admin/Configurationfilechangesthatrequirerestart to see if there are any configs listed here which you have in your app which could be requiring your restart.

As you are using the Add-on builder, it could be that a more recent version of the add-on builder is creating config differently and thus wanting the restart.

Are you using the latest version of the add-on builder?

Its also worth reviewing the splunkd.log around the time of the install to see if there are any logs which suggest why it could be wanting the restart. Search for terms like "install" "restart" "trigger" etc in _internal.

🌟 Did this answer help you? If so, please consider:

  • Adding kudos to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

What Is Splunk? Here’s What You Can Do with Splunk

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...

Level Up Your .conf25: Splunk Arcade Comes to Boston

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...

Manual Instrumentation with Splunk Observability Cloud: How to Instrument Frontend ...

Although it might seem daunting, as we’ve seen in this series, manual instrumentation can be straightforward ...