Deployment Architecture

How to update outputs.conf

Champion

Hi,

I have a new indexer that is ready to be used. My question is how do I get my hundreds of FWD's to pick it up? We have an app that controls the outputs.conf, but even if I update it, will the forwarder restart?

0 Karma
1 Solution

Splunk Employee
Splunk Employee

If your forwarders are using a deployment server, and you have the

restartSplunkd = true 

configured, then yes your clients will automatically restart and pick up the new indexer. If you do not have this set, then it download the new outputs.conf, but it wont apply it till the service is restarted.

View solution in original post

Splunk Employee
Splunk Employee

If your forwarders are using a deployment server, and you have the

restartSplunkd = true 

configured, then yes your clients will automatically restart and pick up the new indexer. If you do not have this set, then it download the new outputs.conf, but it wont apply it till the service is restarted.

View solution in original post