Monitoring Splunk

Reload database.conf without restarting Splunk.

dfronck
Communicator

We're monitoring a lot of databases and we have to change passwords frequently.
We have a password manager that changes an account's DB password and then calls a python script with the account name and the new password. Our python script uses a DBX python script to encrypt the password and then our script replaces the old encrypted password with the new one but Splunk does not see the change until we restart Splunk.

I know that I can reload input.conf by running

splunk _internal call /services/data/inputs/monitor/_reload -auth admin:$ADMINPWD

but this doesn't seem to reload "/opt/splunk/etc/apps/dbx/local/database.conf"

Is there a command that will reload database.conf?

Tags (1)
1 Solution

dfronck
Communicator
splunk _internal call /services/apps/local/dbx/_reload -auth admin:$ADMINPWD

Restarts the DBX app. Restarting the app also encrypts plaintext passwords in database.conf so we're updating our script to just replace the old encrypted password with the new plaintext password. Much simpler.

View solution in original post

dfronck
Communicator
splunk _internal call /services/apps/local/dbx/_reload -auth admin:$ADMINPWD

Restarts the DBX app. Restarting the app also encrypts plaintext passwords in database.conf so we're updating our script to just replace the old encrypted password with the new plaintext password. Much simpler.

changux
Builder

If some like this:

http(s)://SPLUNKHOST:8000/debug/refresh

Doesn't work, the only way is restarting.

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...