Splunk configuration reload/refresh using REST API

[somesoni2]

Hi All,

There is a way to refresh all configuration without restarting Splunk instance, using following:-

http(s)://yoursplunkhost:8000/debug/refresh

This works fine.

I have a requirement where some apps and users (from etc/apps and etc/users) will get copies to my Splunk instance periodically, using shell script. I would like to know a way to achieve this refresh action from the script or saved searches (using REST command). The best solution would be using saved search as I won't have to specify the credentials (as in case of script I might have to).

Any pointer will be of great help. Thanks in advanced.

[MuS · Accepted solution]

Hi somesoni2,

check out this app https://apps.splunk.com/app/1871/ it will provide a custom command called refresh which will do exactly the same as calling the URI /en-US/debug/refresh

hope this helps ...

cheers, MuS

[dcparker]

did you ever get an answer to this? I want to do the same thing, basically I want one of my apps to be checked out from git every so often, and changes would be made to git and not splunk. I haven't figured out how to refresh the app though.