Dashboards & Visualizations

Splunk configuration reload/refresh using REST API

somesoni2
Revered Legend

Hi All,

There is a way to refresh all configuration without restarting Splunk instance, using following:-

http(s)://yoursplunkhost:8000/debug/refresh

This works fine.

I have a requirement where some apps and users (from etc/apps and etc/users) will get copies to my Splunk instance periodically, using shell script. I would like to know a way to achieve this refresh action from the script or saved searches (using REST command). The best solution would be using saved search as I won't have to specify the credentials (as in case of script I might have to).

Any pointer will be of great help. Thanks in advanced.

Tags (2)
1 Solution

MuS
Legend

Hi somesoni2,

check out this app https://apps.splunk.com/app/1871/ it will provide a custom command called refresh which will do exactly the same as calling the URI /en-US/debug/refresh

hope this helps ...

cheers, MuS

View solution in original post

MuS
Legend

Hi somesoni2,

check out this app https://apps.splunk.com/app/1871/ it will provide a custom command called refresh which will do exactly the same as calling the URI /en-US/debug/refresh

hope this helps ...

cheers, MuS

dcparker
Path Finder

did you ever get an answer to this? I want to do the same thing, basically I want one of my apps to be checked out from git every so often, and changes would be made to git and not splunk. I haven't figured out how to refresh the app though.

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...