Splunk Search

When creating an app, how to configure it that after the install, "Restart Required" dialog would be displayed?

imrago
Contributor

I am creating an app which is using a lookup file. That lookup file is populated by a saved search with this setting :

run_on_startup = true

To assure that the lookup is populated, restart of splunk is needed.

Is there a config setting which would trigger this dialog after the installation?

"Restart Required
You must restart Splunk Enterprise to complete the update."

0 Karma
1 Solution

niketn
Legend

@imrago, I believe you are looking for app.conf setting state_change_requires_restart = true

Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Appconf#.5Binstall.5D

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@imrago, I believe you are looking for app.conf setting state_change_requires_restart = true

Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Appconf#.5Binstall.5D

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

imrago
Contributor

Thank you, it was not obvious for me from the documentation. It is working nicely.

niketn
Legend

Glad it is working for you... Happy Weekend 🙂

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...