Splunk Search

Exactly what configuration file or properties can I reload when I do '| extract reload=t'?

melonman
Motivator

Hi

When I update props.conf and/or other .conf files, I usually issue 'extract reload=t' to reload configurations without restarting Splunk. Seems like this command only reloads search time extraction confguration. Intex time configuration and other input or output configuration is not reloaded by this command.

I would like to know exactly what configuration file or properties can I reload when I do '| extract reload=t'?

Thank you!

Tags (1)
1 Solution

Brian_Osburn
Builder

Per the documentation here - http://docs.splunk.com/Documentation/Splunk/4.3/SearchReference/Extract - it should be reloading everything in the props.conf and transforms.conf.

I do find it more useful thought using the |extract reload <transforms.conf_stanza_name> when I'm setting up transforms and extractions.

Brian

View solution in original post

Brian_Osburn
Builder

Per the documentation here - http://docs.splunk.com/Documentation/Splunk/4.3/SearchReference/Extract - it should be reloading everything in the props.conf and transforms.conf.

I do find it more useful thought using the |extract reload <transforms.conf_stanza_name> when I'm setting up transforms and extractions.

Brian

melonman
Motivator

Thanks, Brian!

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...