Splunk Search
Highlighted

Splunk restart for configuration change

Champion

Hello,
We have a master with peers configuration. When we do a configuration change in the indexer we need to restart. All the changes go on correctly. But after sometime we get a message that the Indexer may be down. In alerts we also get " Unable to distribute to peer named Server:8089 at uri Server:8089 because peer has status = "Down" ".

So what is the correct way to restart/ how can we solve this issue in distributed environment?

0 Karma
Highlighted

Re: Splunk restart for configuration change

Champion

Thank you for the reply. I was talking about the indexers where its acting as search peers. If i create an index i have to restart the splunkd service alone in that particular server. Will the "splunk reload deploy-client" command able to do the job for me?

0 Karma
Highlighted

Re: Splunk restart for configuration change

Champion

As per the splunk documentation We should use the below approach:

splunk rolling-restart cluster-peers

_http://docs.splunk.com/Documentation/Splunk/5.0.3/Indexer/Restartthecluster

0 Karma