Archive

Exactly what configuration file or properties can I reload when I do '| extract reload=t'?

Motivator

Hi

When I update props.conf and/or other .conf files, I usually issue 'extract reload=t' to reload configurations without restarting Splunk. Seems like this command only reloads search time extraction confguration. Intex time configuration and other input or output configuration is not reloaded by this command.

I would like to know exactly what configuration file or properties can I reload when I do '| extract reload=t'?

Thank you!

Tags (1)
1 Solution

Builder

Per the documentation here - http://docs.splunk.com/Documentation/Splunk/4.3/SearchReference/Extract - it should be reloading everything in the props.conf and transforms.conf.

I do find it more useful thought using the |extract reload <transforms.conf_stanza_name> when I'm setting up transforms and extractions.

Brian

View solution in original post

Builder

Per the documentation here - http://docs.splunk.com/Documentation/Splunk/4.3/SearchReference/Extract - it should be reloading everything in the props.conf and transforms.conf.

I do find it more useful thought using the |extract reload <transforms.conf_stanza_name> when I'm setting up transforms and extractions.

Brian

View solution in original post

Motivator

Thanks, Brian!

Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!