Splunk Enterprise

Can we restart deployment server? will it have an impact on UF ?


HI ,i have updated inputs.conf in my deployment server. Can i restart my deployment server so that changes will get reflected.

will it impact any of my UF where there will be disconnected from Deployment server and loss of data.

Or can i use any command to update my inputs.conf in server?



0 Karma

Ultra Champion

Restarting a DS is a safe procedure. It will not affect ingest, there will be no loss of data.

You should however note that:
If you are publishing a new application (which will be distributed to DS clients) which has the restart splunk flag set, this will cause the client forwarders to restart the Splunk process. 

Generally speaking, this is not too much of a concern, however if you have forwarders (affected by the new app you are distributing) which process stateless data (such as TCP/UDP inputs) or run scripted inputs, you should be aware that there will be a disruption to these mechanisms for the few minutes it takes to restart Splunk.

If my comment helps, please give it a thumbs up!
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!