Is there a log of changes that have been made to a...

AlexWebber · ‎07-23-2014

A couple people have been given admin access to our splunk instance. Now I am getting messages that a change has been made that requires a restart and no one seems to know what has happened. Is there a log of changes made or another way to determine the changes that have been made that now require this restart?

somesoni2 · ‎07-24-2014

Give this a try.

index=_internal sourcetype=splunkd "*required a restart*"

Is there a log of changes that have been made to a splunk instance?

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

Are you a member of the Splunk Community?

Is there a log of changes that have been made to a splunk instance?

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...