Deployment Architecture

Can I reload savedsearches.conf without restarting after modifying options ?

joy76
Path Finder

Hi, I am just wondering if I can reload the configuration of savedsearches.conf without restarting splunkd and/or splunkweb in CLI mode after modifying option values of properties in that file.

If YES, how can it be done ?

0 Karma
1 Solution

Ayn
Legend

Yes, you can refresh it by hitting the debug/refresh endpoint.

http(s)://splunkserver:port/debug/refresh?entity=admin/savedsearch

View solution in original post

Ayn
Legend

Yes, you can refresh it by hitting the debug/refresh endpoint.

http(s)://splunkserver:port/debug/refresh?entity=admin/savedsearch

joy76
Path Finder

Thank you very much.

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...