[深度理解] 重启 Splunk Search Head Cluster

1: 背景：

关于释放Splunk search head 的job 运行压力：splunk search head cluster 要重启的话，怎么办？

答案是：splunk rolling-restart shcluster-members

Initiate a rolling restart from the command line

Invoke the splunk rolling-restart command from any member:

splunk rolling-restart shcluster-members

亮点：

要注意的是：并不是这个命令都在任何情况下可以用，当search head 的 [shclustering] stanza of server.conf 有变化的时候，要每台search head server 修改好后，每台重启：

When changing configuration settings in the [shclustering] stanza of server.conf, you must restart all members at approximately the same time to maintain identical settings across all members. Do not use the splunk rolling-restart command to restart the members after such configu