Exactly what configuration file or properties can I reload when I do '| extract reload=t'?

[melonman]

Hi

When I update props.conf and/or other .conf files, I usually issue 'extract reload=t' to reload configurations without restarting Splunk. Seems like this command only reloads search time extraction confguration. Intex time configuration and other input or output configuration is not reloaded by this command.

I would like to know exactly what configuration file or properties can I reload when I do '| extract reload=t'?

Thank you!

[Brian_Osburn · Accepted solution]

Per the documentation here - http://docs.splunk.com/Documentation/Splunk/4.3/SearchReference/Extract - it should be reloading everything in the props.conf and transforms.conf.

I do find it more useful thought using the |extract reload <transforms.conf_stanza_name> when I'm setting up transforms and extractions.

Brian

[melonman]

Thanks, Brian!