Getting Data In

props on the indexer

a212830
Champion

Hi,

I should know this at this point, but want to confirm... Is a restart of the indexer required if an updated props is applied? Is there anyway to update props without restarting the indexer?

Tags (2)
0 Karma

kristian_kolb
Ultra Champion

You could always try to hit the following url, which will reload quite a few settings, but not everything.

http(s)://your_indexer/en_US/debug/refresh

No harm in trying.

/K

0 Karma

Ayn
Legend

It depends entirely on what within the props you changed. Search-time settings do not require a restart whereas index-time settings do.

0 Karma

a212830
Champion

Thanks. Is there a doc that will outline the two for me?

0 Karma
Get Updates on the Splunk Community!

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...

Print, Leak, Repeat: UEBA Insider Threats You Can't Ignore

Are you ready to uncover the threats hiding in plain sight? Join us for "Print, Leak, Repeat: UEBA Insider ...

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...