Getting Data In

How to restart forwarders splunkd app after deploying new apps?

NanSplk01
Communicator

I have created a number of apps and push them out using the command line.  In the serverclass.conf I want to add a restart of the forwarders.  This is what I have so far:


[default]
restartSplunkd = true
issueReload = true

[serverClass:duke_test_app:app:duke_test_app]
restartSplunkWeb = 0
restartSplunkd = 1
stateOnClient = enabled

[serverClass:duke_test_app]
whitelist.0 =xxxxxx

Will this work?  

Labels (1)
0 Karma
1 Solution

NanSplk01
Communicator

Great, I appreciate it.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

That looks like it will work.  The app stanza doesn't need restartSplunkd since it's already set globally.

---
If this reply helps you, Karma would be appreciated.
0 Karma

NanSplk01
Communicator

Great, I appreciate it.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...