Deployment Architecture

How to Get Edits to "Take"?


I've used the information previously posted to manually update some XML files in an application and then to restart splunk, and the edits I've made in the files still do not appear. I've also exited the session and the browser, and no dice.

If I edit an XML file manually, how do I get it to "take"? What else can I do?


Tags (2)
0 Karma

Esteemed Legend

Where is your "previously posted" link? What have you edited? Where did you put the edited files? Because you have not provided any details, I will have to guess. Assuming you have updated views inside an app, if you placed them in default, you need to make sure an old copy of the same file is not inside local because then it will have precedence and the other one will be ignored. You also need to make sure that this file is copied to the Search Head (or deployed to it from your DS). You should not need to restart Splunk for changes to take effect (but you will have to refresh your browser if you are on that dashboard).

0 Karma
Get Updates on the Splunk Community!

Dashboard Studio Challenge - Learn New Tricks, Showcase Your Skills, and Win Prizes!

Reimagine what you can do with your dashboards. Dashboard Studio is Splunk’s newest dashboard builder to ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...