Getting Data In

Do I need to reload a deployment server if I make an update to a deployment app for a universal forwarder to pick up the change?

splunkn
Communicator

Assume I have all my folders distributed to Universal Forwarders under Repository location of my Deployment server.

Team1 -- App A - Serverclass A
Team2 -- AppB - Serverclass B

If am going to change some conf under App A and leave it as such without reloading deploy server. I want to know if in the next upcoming phoneHomeInterval my updated App A is going to be picked up by my UF automatically. Does it really need reload? and if so, what is the exact purpose of reload or phoneHomeInterval?

Thanks

0 Karma
1 Solution

teunlaan
Contributor

ehh. No the UF won't pickup de change the next phoneHomeInterval.
If you don't reload the deployment-sever, it doesn't "know" the app has changed. (it has to genarate a new hash)

View solution in original post

0 Karma

teunlaan
Contributor

ehh. No the UF won't pickup de change the next phoneHomeInterval.
If you don't reload the deployment-sever, it doesn't "know" the app has changed. (it has to genarate a new hash)

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...