How to reload Global savedsearches

Question

If I have saved my searches globally, ie in the file

$SPLUNK_HOME/apps/search/local/savedsearches.conf

is it then possible to reload changes somehow?

I have tried several restart/reload options but none seem to work.

splunk _internal call /services/admin/search/data/ui/nav?refresh=1
splunk _internal call /services/apps//
splunk restartss

Obviously if I edit them in the GUI, they will be reloaded but I have changed names to them and would like the new names to appear.

Answer 1

2

You can use this command to reload the saved searches:

splunk _internal call "/admin/savedsearch/_reload"

or via Splunkweb visit the URI /debug/refresh?entity=admin/savedsearch

eg. http://localhost:8000/debug/refresh?entity=admin/savedsearch

link

answered 04 Nov '10, 15:44

ziegfried ♦
7.2k●1●3●15
accept rate: 53%

The internal call needed to like this: splunk _internal call /servicesNS/admin/search/admin/savedsearch/_reload -auth username to work. But the web link was useful, it reloads everything. https://servername/en-US/debug/refresh

(12 Nov '10, 08:26) sdaa

How do I reload the savedsearch.conf for my specific app?

(16 Nov '10, 19:37) mpatnode

Answer 2

0	This works for my app savedsearches.conf too. link answered 04 May, 14:40 tonopahtaos 50●3 accept rate: 0% I mean the web link works for my app's savedsearches.conf (04 May, 14:42) tonopahtaos

How to reload Global savedsearches

Follow this question

Splunk Resources

Related questions