Knowledge Management

How come my macro data isn't refreshing in new searches?

rip_leroi
Explorer

I have a macro that I created and have since added additional data to it. However, when I search the new data does not show up. I did CTRL+SHIFT+E on the macro in the search window, and it doesn't reflect the new data I added. However, I see all the data I added when I go to the macro settings.

Is there a way to refresh a macro to include the new data?

Tags (2)
0 Karma
1 Solution

pkeenan87
Communicator

Try running a debug/refresh by navigating to $SPLUNK_URL:8000/debug/refresh and clicking on the refresh button that appears. Just replace $SPLUNK_URL with the URL you use to log into Splunk with. For example, to refresh Splunk on my laptop I go to http://localhost:8000/debug/refresh.

View solution in original post

pkeenan87
Communicator

Try running a debug/refresh by navigating to $SPLUNK_URL:8000/debug/refresh and clicking on the refresh button that appears. Just replace $SPLUNK_URL with the URL you use to log into Splunk with. For example, to refresh Splunk on my laptop I go to http://localhost:8000/debug/refresh.

rip_leroi
Explorer

This did the trick. Thank you very much.

0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...