Deployment Architecture

Can i change phoneHomeIntervalInSecs setting dynamically

JackNobrega
Explorer

I would like to know if I can change the phoneHomeIntervalInSecs time in sec dynamically or do i need to do a restart.

0 Karma

lguinn2
Legend

When the phoneHomeIntervalInSecs is changed, you must restart the forwarder. That is usually not a problem on a forwarder.

However, it could be a problem on an indexer or search head. I don't know if this will work but you could try

 http(s)://yoursplunkhost:8000/debug/refresh

or the equivalent REST endpoint. I know this causes Splunk to rescan props.conf and transforms.conf, but I don't know if it will pick up deploymentclient.conf

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...