When I change data in a CSS file. SPLUNK does not change the data in this file.
why??
to reflect the css changes easiest way is to bump the server.
https://<yourSplunk>/en-US/_bump
Click on Bump version button. Every click increases the bump, which clears all caching in the webserver. No need to restart..
If you find it doesn't work as expected, run also the debug/refresh endpoint.
https://<yourSplunk>/debug/refresh
And if that doesn't work, restart the web service only.
$SPLUNK_HOME/bin/splunk restart splunkweb
And if that doesn't work, restart Splunk.
$SPLUNK_HOME/bin/splunk restart
Also don't forget to clear your web browser cache.
This helps most time when everything is reloaded but the code isn't showing up.
can you post it the search you are using? And more info please.