If you were to manually update the tags.conf file and remove a tagging for a specific server, what is needed in order for these changes to show up on the web gui (ie. restart splunk, wait X seconds, manually reload tags.conf, etc.)
Thanks a lot!
@mikelanghorst- We deleted a tag from the and it still persists.
After more testing, I noticed that while tags are immediately written to tags.conf, if I remove it once it has been written it doesn't update the website. However, if I restart splunk the changes show. I'm hoping a restart isn't required!
Does anyone else have insight on this? It doesn't appear to be updating on search.
tags.conf is read at search time, when I add tags via the config file they are available immediately.
answered 29 Sep '11, 13:45