Dashboards & Visualizations

Splunk configuration reload/refresh using REST API

somesoni2
Revered Legend

Hi All,

There is a way to refresh all configuration without restarting Splunk instance, using following:-

http(s)://yoursplunkhost:8000/debug/refresh

This works fine.

I have a requirement where some apps and users (from etc/apps and etc/users) will get copies to my Splunk instance periodically, using shell script. I would like to know a way to achieve this refresh action from the script or saved searches (using REST command). The best solution would be using saved search as I won't have to specify the credentials (as in case of script I might have to).

Any pointer will be of great help. Thanks in advanced.

Tags (2)
1 Solution

MuS
Legend

Hi somesoni2,

check out this app https://apps.splunk.com/app/1871/ it will provide a custom command called refresh which will do exactly the same as calling the URI /en-US/debug/refresh

hope this helps ...

cheers, MuS

View solution in original post

MuS
Legend

Hi somesoni2,

check out this app https://apps.splunk.com/app/1871/ it will provide a custom command called refresh which will do exactly the same as calling the URI /en-US/debug/refresh

hope this helps ...

cheers, MuS

dcparker
Path Finder

did you ever get an answer to this? I want to do the same thing, basically I want one of my apps to be checked out from git every so often, and changes would be made to git and not splunk. I haven't figured out how to refresh the app though.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...