Our splunk env's are fed their content and config via github. As a result someone coudl deploy something and the SH will restart in the middle of the sec teaming doing an investigation. So my question is... Can I just reload the presentation app content (dashboards etc..) without restarting splunk?
I cannot be the first person in this predicament.
What I'm wondering with this setup: why would Splunk restart if you deploy an app, config, and content via git?
cheers, MuS
Have you looked into doing a /debug/refresh
?
They even have an app for it
https://splunkbase.splunk.com/app/1871/