Why does Splunk ask me to restart when I create a new index?

[gibba]

Hi everyone,

I don't understand why, but when I create a new index, Splunk needs a restart.

Do you have best practice for this?

Thank a lot

[somesoni2]

This shohuld help

http://answers.splunk.com/answers/96233/create-new-index-without-restarting-splunk-indexer.html

[dineshraj · Accepted solution]

Try using the rest endpoint to create indexes, it won't ask you for a restart. But you need to run the command on all your indexers -

curl -k -u : https://indexer:port/servicesNS///data/indexes -d name=