Deployment Architecture

App 'search' was installed or modified, and the following objects required a restart: default

the_wolverine
Champion

Frequently my search head displays a banner indicating the the search app was installed or modified and that a restart is required. There seems to be no reason for this to occur, and in our production environment, requires us to open a ticket to get the SH restarted.

0 Karma
1 Solution

the_wolverine
Champion

We've had no explanation or solution provided by Splunk for this issue despite ticket having been opened with support.

What I've done is to create an internal alert which notifies us when the condition occurs. Then we schedule a restart of that SH for the next convenient time.

View solution in original post

0 Karma

the_wolverine
Champion

We've had no explanation or solution provided by Splunk for this issue despite ticket having been opened with support.

What I've done is to create an internal alert which notifies us when the condition occurs. Then we schedule a restart of that SH for the next convenient time.

0 Karma

shawn_smith
New Member

I am experiencing this same issue but the message is regarding my "splunk app for Nix" Did you ever find an answer on this?

0 Karma

premg
Engager

We are also facing same issue in our Search heads.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...