Getting Data In

Deployment Server - reload configs without restarting splunk?

tollops
Explorer

Hi;

We are currently setting up multiple new forwarders, which are getting their configs from the deployment server.

Everytime, we setup a new app or modify an existing app we are having to restart splunk.

Is there an easier way to re-initialise the Deployment Server to refresh the /opt/splunk/var/run/tmp/ sub-folders without having to do a "service restart splunk"

Trevor..

Labels (1)

iamarkaprabha
Contributor

Yes , You can create a server class for restart . Add the restart app and clients for it.
It will work like smooth

0 Karma

dominiquevocat
SplunkTrust
SplunkTrust

You might want to look at https://splunkbase.splunk.com/app/2775/
it has a relod deploy server as well as restart forwarder feature.

0 Karma

mlconnor
Explorer

If you are getting this error

An error occurred: Could not create Splunk settings directory at '/root/.splunk'

Then make sure you run the process as the user you typically run splunk from. splunk in my case.

sudo su splunk
[splunk@servername5001 /opt/splunk/etc](603)
$ /opt/splunk/bin/splunk reload deploy-server
Your session is invalid.  Please login.
Splunk username: admin
Password: 
Login successful, running command...
Reloading serverclass(es).
[splunk@servername /opt/splunk/etc](604)

BG
Explorer

I realise this post is 6 years old, but it still helped me.

Just to add something that might be useful:

When it asks for the Splunk username, this isn't a Linux user account, it's an application user account on the Deployment Server. It's confusing because many other Splunk commands can be run by Linux user accounts, but it seems not the 'deploy-server reload' command.

$ /opt/splunk/bin/splunk reload deploy-server
Your session is invalid.  Please login.
Splunk username: admin

Also, you can append '-class [serverclass name] onto the end of the command and only changes made to the corresponding deployment apps will get reloaded, so this is perhaps a safer option if you're nervous about reloading everything.

0 Karma

kskujawa
Explorer

I have a dummy app that I push when I want to make changes. Just add that app and next check in all updated apps get pushed.

0 Karma

lukejadamec
Super Champion

Great, help out and accept the right answer or post a better one.

0 Karma

tollops
Explorer

Bingo. We have success.
Thanks Peoples.. 🙂

joshd
Builder

Should be able to reload the configs by accessing http://yoursplunkinstance/en-US/debug/refresh

0 Karma

kristian_kolb
Ultra Champion

that takes longer time, and it reloads a bunch of other stuff. I think it's generally better suited for reloading props/transforms stuff that would normally require a restart.

0 Karma

tyronetv
Communicator

According to http://wiki.splunk.com/Deploy:DeploymentServer it is $SPLUNK_HOME/bin/splunk reload deploy-server

There is other information there but I think that answers you question.

matthewpearce
Explorer

For larger deployments, I think it's better to use the -class switch
${SPLUNK_HOME}/bin/splunk reload deploy-server -class

Tags (1)

rahulkumar02
Engager

This helped me a lot. Thank You!

Tags (1)
0 Karma

lukejadamec
Super Champion

Big fan of reload deploy-server myself.

ben_leung
Builder

Can anyone second that this is the endpoint for the command?

/services/deployment/client/config/reload -X POST

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...