Deployment Architecture

Can i change phoneHomeIntervalInSecs setting dynamically

JackNobrega
Explorer

I would like to know if I can change the phoneHomeIntervalInSecs time in sec dynamically or do i need to do a restart.

0 Karma

lguinn2
Legend

When the phoneHomeIntervalInSecs is changed, you must restart the forwarder. That is usually not a problem on a forwarder.

However, it could be a problem on an indexer or search head. I don't know if this will work but you could try

 http(s)://yoursplunkhost:8000/debug/refresh

or the equivalent REST endpoint. I know this causes Splunk to rescan props.conf and transforms.conf, but I don't know if it will pick up deploymentclient.conf

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...