I was searching through the documentation but did not find anything on this. I was looking to create an index but I see on the indexes page it says it could trigger a rolling restart for some actions. Does this include creating a new index? The link on the page brings me to general help, not anything specific. I did not see anything when looking through the documentation either.
Hi @aohls,
Look here for changes that require a rolling restart for the indexer cluster :
https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/Updatepeerconfigurations#Restart_or_reloa...
And here for index configuration changes :
https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/Determinerestart
As you can see adding a new index does not require a restart :
You do not need to restart the indexer if you only make these changes:
Adding new index stanzas.
Cheers,
David
Hi @aohls,
Look here for changes that require a rolling restart for the indexer cluster :
https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/Updatepeerconfigurations#Restart_or_reloa...
And here for index configuration changes :
https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/Determinerestart
As you can see adding a new index does not require a restart :
You do not need to restart the indexer if you only make these changes:
Adding new index stanzas.
Cheers,
David
Thanks @DavidHourani this is helpful to know.
You're welcome !