Splunk Enterprise

Can we restart deployment server? will it have an impact on UF ?

Ashwini008
Builder

HI ,i have updated inputs.conf in my deployment server. Can i restart my deployment server so that changes will get reflected.

will it impact any of my UF where there will be disconnected from Deployment server and loss of data.

Or can i use any command to update my inputs.conf in server?

 

Thanks

0 Karma

nickhills
Ultra Champion

Restarting a DS is a safe procedure. It will not affect ingest, there will be no loss of data.

You should however note that:
If you are publishing a new application (which will be distributed to DS clients) which has the restart splunk flag set, this will cause the client forwarders to restart the Splunk process. 

Generally speaking, this is not too much of a concern, however if you have forwarders (affected by the new app you are distributing) which process stateless data (such as TCP/UDP inputs) or run scripted inputs, you should be aware that there will be a disruption to these mechanisms for the few minutes it takes to restart Splunk.

If my comment helps, please give it a thumbs up!
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...