topic Re: Modify log.cfg via rest in Splunk Dev

Modify log.cfg via rest

tlmayes — Thu, 03 Aug 2017 01:59:50 GMT

Is it possible to modify log.cfg via REST? We have several thousand UF's where we need to modify this config file.

Re: Modify log.cfg via rest

hardikJsheth — Thu, 03 Aug 2017 12:36:54 GMT

Are you using deployment server for managing your Universal Forwarders?

Re: Modify log.cfg via rest

tlmayes — Thu, 03 Aug 2017 12:41:24 GMT

Yes, but the requirement here is to use REST. A onetime "permanent" change without adding to the very long list of "apps" to maintain. Unless I am mistaken, once we make the change via a Deployment Svr app, we can never remove the app since that would also remove the change.