Splunk Enterprise

Can we restart deployment server? will it have an impact on UF ?

Ashwini008
Builder

HI ,i have updated inputs.conf in my deployment server. Can i restart my deployment server so that changes will get reflected.

will it impact any of my UF where there will be disconnected from Deployment server and loss of data.

Or can i use any command to update my inputs.conf in server?

 

Thanks

0 Karma

nickhills
Ultra Champion

Restarting a DS is a safe procedure. It will not affect ingest, there will be no loss of data.

You should however note that:
If you are publishing a new application (which will be distributed to DS clients) which has the restart splunk flag set, this will cause the client forwarders to restart the Splunk process. 

Generally speaking, this is not too much of a concern, however if you have forwarders (affected by the new app you are distributing) which process stateless data (such as TCP/UDP inputs) or run scripted inputs, you should be aware that there will be a disruption to these mechanisms for the few minutes it takes to restart Splunk.

If my comment helps, please give it a thumbs up!
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...

Data Persistence in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. What happens if the OpenTelemetry collector ...

Thanks for the Memories! Splunk University, .conf25, and our Community

Thank you to everyone in the Splunk Community who joined us for .conf25, which kicked off with our iconic ...