Splunk Search

When creating an app, how to configure it that after the install, "Restart Required" dialog would be displayed?

imrago
Contributor

I am creating an app which is using a lookup file. That lookup file is populated by a saved search with this setting :

run_on_startup = true

To assure that the lookup is populated, restart of splunk is needed.

Is there a config setting which would trigger this dialog after the installation?

"Restart Required
You must restart Splunk Enterprise to complete the update."

0 Karma
1 Solution

niketn
Legend

@imrago, I believe you are looking for app.conf setting state_change_requires_restart = true

Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Appconf#.5Binstall.5D

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@imrago, I believe you are looking for app.conf setting state_change_requires_restart = true

Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Appconf#.5Binstall.5D

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

imrago
Contributor

Thank you, it was not obvious for me from the documentation. It is working nicely.

niketn
Legend

Glad it is working for you... Happy Weekend 🙂

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...