We are currently setting up multiple new forwarders, which are getting their configs from the deployment server.
Everytime, we setup a new app or modify an existing app we are having to restart splunk.
Is there an easier way to re-initialise the Deployment Server to refresh the /opt/splunk/var/run/tmp/ sub-folders without having to do a "service restart splunk"
If you are getting this error
An error occurred: Could not create Splunk settings directory at '/root/.splunk'
Then make sure you run the process as the user you typically run splunk from. splunk in my case.
sudo su splunk [splunk@servername5001 /opt/splunk/etc](603) $ /opt/splunk/bin/splunk reload deploy-server Your session is invalid. Please login. Splunk username: admin Password: Login successful, running command... Reloading serverclass(es). [splunk@servername /opt/splunk/etc](604)