Deployment Architecture

Deploying content to SH without resarting splunk

brent_weaver
Builder

Our splunk env's are fed their content and config via github. As a result someone coudl deploy something and the SH will restart in the middle of the sec teaming doing an investigation. So my question is... Can I just reload the presentation app content (dashboards etc..) without restarting splunk?

I cannot be the first person in this predicament.

Tags (1)
0 Karma

MuS
Legend

What I'm wondering with this setup: why would Splunk restart if you deploy an app, config, and content via git?

cheers, MuS

0 Karma

skoelpin
SplunkTrust
SplunkTrust

Have you looked into doing a /debug/refresh?

They even have an app for it
https://splunkbase.splunk.com/app/1871/

Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...