Getting Data In

props on the indexer

a212830
Champion

Hi,

I should know this at this point, but want to confirm... Is a restart of the indexer required if an updated props is applied? Is there anyway to update props without restarting the indexer?

Tags (2)
0 Karma

kristian_kolb
Ultra Champion

You could always try to hit the following url, which will reload quite a few settings, but not everything.

http(s)://your_indexer/en_US/debug/refresh

No harm in trying.

/K

0 Karma

Ayn
Legend

It depends entirely on what within the props you changed. Search-time settings do not require a restart whereas index-time settings do.

0 Karma

a212830
Champion

Thanks. Is there a doc that will outline the two for me?

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...