1: 背景：

關于釋放Splunk search head 的job 運行壓力：splunk search head cluster 要重啟的話，怎么辦？

答案是：splunk rolling-restart shcluster-members

Initiate a rolling restart from the command line

Invoke the splunk rolling-restart command from any member:

splunk rolling-restart shcluster-members

亮點：

要注意的是：并不是這個命令都在任何情況下可以用，當search head 的 [shclustering] stanza of server.conf 有變化的時候，要每臺search head server 修改好后，每臺重啟：

When changing configuration settings in the [shclustering] stanza of server.conf, you must restart all members at approximately the same time to maintain identical settings across all members. Do not use the splunk rolling-restart command to restart the members after such configu