https://community.splunk.com/t5/Getting-Data-In/indexer-configuration/m-p/75819#M15476 <P>Either will work.</P> <P>If it was an index for a custom application, you'd probably put the definition in etc/&lt;app&gt;/local</P> <P>But since you mention the search app, and you're unlikely to remove/disable it, it doesn't really matter.</P> <P>I tend to keep the "permanent" stuff in system/local</P> Wed, 27 Mar 2013 11:06:51 GMT jonuwz 2013-03-27T11:06:51Z https://community.splunk.com/t5/Getting-Data-In/indexer-configuration/m-p/75818#M15475 <P>I created a new index in my splunk instance. I want to set some custom settings for event splitting in props.conf for the new index. which path should this props.conf go. Is it $SPLUNK_HOME/etc/apps/search/local or $SPLUNK_HOME/etc/system/local</P> <P>Thanks in advance</P> Mon, 28 Sep 2020 13:37:14 GMT https://community.splunk.com/t5/Getting-Data-In/indexer-configuration/m-p/75818#M15475 sansri7680 2020-09-28T13:37:14Z https://community.splunk.com/t5/Getting-Data-In/indexer-configuration/m-p/75819#M15476 <P>Either will work.</P> <P>If it was an index for a custom application, you'd probably put the definition in etc/&lt;app&gt;/local</P> <P>But since you mention the search app, and you're unlikely to remove/disable it, it doesn't really matter.</P> <P>I tend to keep the "permanent" stuff in system/local</P> Wed, 27 Mar 2013 11:06:51 GMT https://community.splunk.com/t5/Getting-Data-In/indexer-configuration/m-p/75819#M15476 jonuwz 2013-03-27T11:06:51Z