Deployment Architecture

Is there a way for a deployment server app update to trigger IndexWriter for new indexes

jplumsdaine22
Influencer

Usually we manage our indexes with an app deployed via deployment server. Although these indexes appear to be created (ie splunk show indexes will report the index is there), the actual index creation does not occur until the indexer is restarted - which is a pain. We recently moved to an index cluster for some of our indexers. Pushing a new index via the configuration bundle triggers the IndexWriter process immediately, and no restart is required!

Does anyone know if there is a way to get the deployment server to do this as well?

0 Karma

dshpritz
SplunkTrust
SplunkTrust

Afraid not. However, if you want to avoid a restart, once the configs have made their way to the indexer, you can run the following:

./splunk reload index

And the indexer should pick it up. This will have to be run on all of the indexers.

Edit: You may want to look at the issueReload = true | false option for serverclass.conf. I believe this is new as of 6.4, but according to its description:

* If true, triggers a reload of internal processors at the client when a member app or a directly configured app is updated
* If you don't want to immediately start using an app that is pushed to a client, you should set this to false.
* defaults to false

I haven't tested it personally, so I'm not sure if it will achieve what you are looking for.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...