Splunk Search

When creating an app, how to configure it that after the install, "Restart Required" dialog would be displayed?

imrago
Contributor

I am creating an app which is using a lookup file. That lookup file is populated by a saved search with this setting :

run_on_startup = true

To assure that the lookup is populated, restart of splunk is needed.

Is there a config setting which would trigger this dialog after the installation?

"Restart Required
You must restart Splunk Enterprise to complete the update."

0 Karma
1 Solution

niketn
Legend

@imrago, I believe you are looking for app.conf setting state_change_requires_restart = true

Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Appconf#.5Binstall.5D

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@imrago, I believe you are looking for app.conf setting state_change_requires_restart = true

Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Appconf#.5Binstall.5D

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

imrago
Contributor

Thank you, it was not obvious for me from the documentation. It is working nicely.

niketn
Legend

Glad it is working for you... Happy Weekend 🙂

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...