Splunk Dev

custom reporting command

user487596
Explorer

Hello everyone, I'm new to Splunk and I have a question: is it possible to update the custom reporting command code without restarting Splunk?

"After modifying configuration files on disk, you need to restart Splunk Enterprise. This step is required for your updates to take effect. For information on how to restart Splunk Enterprise, see Start and stop Splunk Enterprise in the Splunk Enterprise Admin Manual."

I mean... How can I debug my app if I have to reload the Splunk every time I changed something?

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Adding to @bowesmana 's answer - you're not trying to debug development stuff on a production environment, are you? Dev environments typically restart relatively quickly since they don't hold much data.

And you don't have to restart Splunk every time you change something. Just when you change things that require restart. I'd hazard a guess that for search-time command it should be enough to to /debug/refresh

0 Karma

user487596
Explorer

@PickleRick wrote:

You're not trying to debug development stuff on a production environment, are you?


Heh, atm i'am not. But how do you debug an application that depends on Splunk Enterprise Security without yet another license?

0 Karma

bowesmana
SplunkTrust
SplunkTrust

What are you changing, by custom reporting commands do you mean you've written some python extension?

You don't need to restart Splunk generally, but depends what you have changed

Are you running on-prem - if so, highly recommend this app

https://splunkbase.splunk.com/app/4353

If you are changing Javascript, you can run the bump command

https://hostname/en-GB/_bump

or there is the refresh option

https://hostname/en-GB/debug/refresh

depending on whether you can access these.

0 Karma

user487596
Explorer

@bowesmana wrote:

What are you changing, by custom reporting commands do you mean you've written some python extension?

You don't need to restart Splunk generally, but depends what you have changed

 


From this app structure (https://dev.splunk.com/enterprise/docs/developapps/createapps/appanatomy/), i'am talking about changing the python code in bin/command.py

Yes, we are using on-prem solution. Thanks, a'll check this app.

0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...