Deployment Architecture

Can I reload savedsearches.conf without restarting after modifying options ?

joy76
Path Finder

Hi, I am just wondering if I can reload the configuration of savedsearches.conf without restarting splunkd and/or splunkweb in CLI mode after modifying option values of properties in that file.

If YES, how can it be done ?

0 Karma
1 Solution

Ayn
Legend

Yes, you can refresh it by hitting the debug/refresh endpoint.

http(s)://splunkserver:port/debug/refresh?entity=admin/savedsearch

View solution in original post

Ayn
Legend

Yes, you can refresh it by hitting the debug/refresh endpoint.

http(s)://splunkserver:port/debug/refresh?entity=admin/savedsearch

joy76
Path Finder

Thank you very much.

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...