Splunk Search

When creating an app, how to configure it that after the install, "Restart Required" dialog would be displayed?

imrago
Contributor

I am creating an app which is using a lookup file. That lookup file is populated by a saved search with this setting :

run_on_startup = true

To assure that the lookup is populated, restart of splunk is needed.

Is there a config setting which would trigger this dialog after the installation?

"Restart Required
You must restart Splunk Enterprise to complete the update."

0 Karma
1 Solution

niketn
Legend

@imrago, I believe you are looking for app.conf setting state_change_requires_restart = true

Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Appconf#.5Binstall.5D

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@imrago, I believe you are looking for app.conf setting state_change_requires_restart = true

Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Appconf#.5Binstall.5D

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

imrago
Contributor

Thank you, it was not obvious for me from the documentation. It is working nicely.

niketn
Legend

Glad it is working for you... Happy Weekend 🙂

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...