Dashboards & Visualizations

How to Update Splunk after JavaScript Changes without Restarting Splunk

mmensch
Path Finder

Hello Splunkers,

I have an issue that might have an easy fix, but I do not know of one.

I am working with a few teammates on a single Splunk instance. Everytime we make a javascript change to one of our reports or dashboards, we have to restart the Splunk server. This is an issue because when multiple people are working, everyone has to be at a stopping point.

Is there a way to show JavaScript or CSS changes in Splunk Web without restarting the Splunk server?

Thanks,
Matt

1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

Of Course!!!!!!

The easiest method is to bump the server.

https://<yourSplunk>/en-US/_bump

Click that button. Every click increases the bump, which effectively breaks all caching in the webserver. No need to restart! If you find it doesn't work as expected, run also the debug/refresh endpoint.

https://<yourSplunk>/debug/refresh

And if that doesn't work, restart the web service only.

 $SPLUNK_HOME/bin/splunk restart splunkweb

And if that doesn't work, restart Splunk.

View solution in original post

schose
Builder

Hi,

i created a custom search command "| dobump ". Feel free to test it out and give feedback.

https://github.com/schose/TA-dobump

Cheers,

Andreas

bmacias84
Champion

The better method if you are developing is to use the following setting in your web.conf. You will never have to debug refresh or bump and rarely restart.
DO NOT RUN THESE SETTINGS IN PRODUCTION

[settings]
js_no_cache = true
cacheBytesLimit = 0
cacheEntriesLimit = 0
max_view_cache_size = 0
auto_refresh_views = 1

alacercogitatus
SplunkTrust
SplunkTrust

Of Course!!!!!!

The easiest method is to bump the server.

https://<yourSplunk>/en-US/_bump

Click that button. Every click increases the bump, which effectively breaks all caching in the webserver. No need to restart! If you find it doesn't work as expected, run also the debug/refresh endpoint.

https://<yourSplunk>/debug/refresh

And if that doesn't work, restart the web service only.

 $SPLUNK_HOME/bin/splunk restart splunkweb

And if that doesn't work, restart Splunk.

Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...