[深度理解] 重启 Splunk Search Head Cluster
1: 背景:
关于释放Splunk search head 的job 运行压力:splunk search head cluster 要重启的话,怎么办?
答案是:splunk rolling-restart shcluster-members
Initiate a rolling restart from the command line
Invoke the splunk rolling-restart
command from any member:
splunk rolling-restart shcluster-members
亮点:
要注意的是:并不是这个命令都在任何情况下可以用,当search head 的 [shclustering]
stanza of server.conf 有变化的时候,要每台search head server 修改好后,每台重启:
When changing configuration settings in the [shclustering]
stanza of server.conf
, you must restart all members at approximately the same time to maintain identical settings across all members. Do not use the splunk rolling-restart
command to restart the members after such configu