Difference between splunkd -p 8089 restart or splunkd -p 8089 start

[rcreddy06]

When I do top -c1 on the indexers/Heavy Forwarders, splunkd process is running as follows

splunkd -p 8089 restart or splunkd -p 8089 start.

What is the difference between these two processes? & why is it different for same type of hosts (indexers)?

[woodcock · Accepted solution]

There are 2 ways to start splunk: $SPLUNK_HOME/bin/splunk start or $SPLUNK_HOME/bin/splunk restart. The restart first stops splunk and then starts it but the start just does a start. What you are seeing is that sometimes one command was used and other times another was used.