Splunk Enterprise

Can we restart deployment server? will it have an impact on UF ?


HI ,i have updated inputs.conf in my deployment server. Can i restart my deployment server so that changes will get reflected.

will it impact any of my UF where there will be disconnected from Deployment server and loss of data.

Or can i use any command to update my inputs.conf in server?



0 Karma

Ultra Champion

Restarting a DS is a safe procedure. It will not affect ingest, there will be no loss of data.

You should however note that:
If you are publishing a new application (which will be distributed to DS clients) which has the restart splunk flag set, this will cause the client forwarders to restart the Splunk process. 

Generally speaking, this is not too much of a concern, however if you have forwarders (affected by the new app you are distributing) which process stateless data (such as TCP/UDP inputs) or run scripted inputs, you should be aware that there will be a disruption to these mechanisms for the few minutes it takes to restart Splunk.

If my comment helps, please give it a thumbs up!
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!