Hi
When I update props.conf and/or other .conf files, I usually issue 'extract reload=t' to reload configurations without restarting Splunk. Seems like this command only reloads search time extraction confguration. Intex time configuration and other input or output configuration is not reloaded by this command.
I would like to know exactly what configuration file or properties can I reload when I do '| extract reload=t'?
Thank you!
Per the documentation here - http://docs.splunk.com/Documentation/Splunk/4.3/SearchReference/Extract - it should be reloading everything in the props.conf and transforms.conf.
I do find it more useful thought using the |extract reload <transforms.conf_stanza_name>
when I'm setting up transforms and extractions.
Brian
Per the documentation here - http://docs.splunk.com/Documentation/Splunk/4.3/SearchReference/Extract - it should be reloading everything in the props.conf and transforms.conf.
I do find it more useful thought using the |extract reload <transforms.conf_stanza_name>
when I'm setting up transforms and extractions.
Brian
Thanks, Brian!