Splunk Search

When creating an app, how to configure it that after the install, "Restart Required" dialog would be displayed?

imrago
Contributor

I am creating an app which is using a lookup file. That lookup file is populated by a saved search with this setting :

run_on_startup = true

To assure that the lookup is populated, restart of splunk is needed.

Is there a config setting which would trigger this dialog after the installation?

"Restart Required
You must restart Splunk Enterprise to complete the update."

0 Karma
1 Solution

niketn
Legend

@imrago, I believe you are looking for app.conf setting state_change_requires_restart = true

Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Appconf#.5Binstall.5D

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@imrago, I believe you are looking for app.conf setting state_change_requires_restart = true

Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Appconf#.5Binstall.5D

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

imrago
Contributor

Thank you, it was not obvious for me from the documentation. It is working nicely.

niketn
Legend

Glad it is working for you... Happy Weekend 🙂

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...