props.conf changes require complete restart?

Question

Hi to all - short question:

Do changes to the props.conf really require a restart of splunk? Is there a way to apply the changes without restarting?

Answer 1

0

Yes. Per the documentation:

http://www.splunk.com/base/Documentation/latest/admin/Propsconf

To use one or more of these configurations, copy the configuration block into
props.conf in $SPLUNK_HOME/etc/system/local/. You must restart Splunk to enable configurations.

link

answered 18 May '11, 15:32

jbsplunk ♦
4.9k●1●14
accept rate: 34%

2

Most of the case, Yes.

However, Search time field extraction via props.conf, (and transforms.conf) does not require restarting Splunk.

(19 May '11, 00:28) Masa ♦

props.conf changes require complete restart?

Follow this question

Splunk Resources

Related questions