Deployment Architecture

Restart LWF's to use new app deployed from deployment server

chicodeme
Communicator

The deployment server deploys the apps just fine using the splunk reload deploy-server command. But once the app is on the LWF's, are you required to restart the LWF in order to get the app to start working?

Maybe it depends on the app, so lets pick the unix app(Splunk for Unix and Linux) from splunkbase.

Are you required to restart the LWF's as of version 4.1.6 in order for the deployed app to become active? Active.. meaning collecting data and sending it to the indexer.

I'm not on the recently released 4.1.7 yet.

Tags (1)
0 Karma
2 Solutions

David
Splunk Employee
Splunk Employee

I believe the LWF is going to need a restart in order for it to pick up any new inputs. You should be able to do that with:

[global]
restartSplunkd=true 

in your serverclass.conf. (Or you can put it under any particular server stanza, if desired.)

Does that work for you?

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

Most app configurations that you would deploy to a LWF will require a restart of the LWF. (This is not so for, say, most search head configurations) If you add restartSplunkd to the app stanza, e.g.:

[serverClass:myclass:app:myspecialapp]
whitelist.0=server1
restartSplunkd=true

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

Most app configurations that you would deploy to a LWF will require a restart of the LWF. (This is not so for, say, most search head configurations) If you add restartSplunkd to the app stanza, e.g.:

[serverClass:myclass:app:myspecialapp]
whitelist.0=server1
restartSplunkd=true

chicodeme
Communicator

I didn't know of that option. Thanks I will try it out.

0 Karma

David
Splunk Employee
Splunk Employee

I believe the LWF is going to need a restart in order for it to pick up any new inputs. You should be able to do that with:

[global]
restartSplunkd=true 

in your serverclass.conf. (Or you can put it under any particular server stanza, if desired.)

Does that work for you?

chicodeme
Communicator

I didn't know of that option. Thanks I will try it out.

0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...