<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How do I define a stanza that applies to all stanzas in the same inputs.conf file? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-do-I-define-a-stanza-that-applies-to-all-stanzas-in-the-same/m-p/179263#M35949</link>
    <description>&lt;P&gt;This is not the way it works, they are no notion stanza limited to a single inputs.conf  or a single app.&lt;/P&gt;

&lt;P&gt;The parameter are specific to their specific stanza.&lt;BR /&gt;
The only exception is the [default] that is for all stanza (in all the apps)&lt;/P&gt;

&lt;P&gt;Maybe are you confused with the props.conf that may overlap.&lt;/P&gt;

&lt;P&gt;See the way splunk configuration merges, and use btool to verify :&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/Admin/Wheretofindtheconfigurationfiles"&gt;http://docs.splunk.com/Documentation/Splunk/latest/Admin/Wheretofindtheconfigurationfiles&lt;/A&gt;&lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Usebtooltotroubleshootconfigurations"&gt;http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Usebtooltotroubleshootconfigurations&lt;/A&gt;&lt;/P&gt;</description>
    <pubDate>Tue, 27 May 2014 16:14:58 GMT</pubDate>
    <dc:creator>yannK</dc:creator>
    <dc:date>2014-05-27T16:14:58Z</dc:date>
    <item>
      <title>How do I define a stanza that applies to all stanzas in the same inputs.conf file?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-I-define-a-stanza-that-applies-to-all-stanzas-in-the-same/m-p/179262#M35948</link>
      <description>&lt;P&gt;I could have sworn it was &lt;CODE&gt;[]&lt;/CODE&gt; but that did not seem to work, nor did &lt;CODE&gt;[*]&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;I do not want to use &lt;CODE&gt;[default]&lt;/CODE&gt; because I don't want to change &lt;EM&gt;all&lt;/EM&gt; inputs on the host, just the ones in a given file.&lt;/P&gt;

&lt;P&gt;I could swear I've seen this done, and it should be easy but I searched and searched to no avail.&lt;/P&gt;

&lt;P&gt;Please help!&lt;/P&gt;</description>
      <pubDate>Tue, 27 May 2014 14:34:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-I-define-a-stanza-that-applies-to-all-stanzas-in-the-same/m-p/179262#M35948</guid>
      <dc:creator>neiljpeterson</dc:creator>
      <dc:date>2014-05-27T14:34:07Z</dc:date>
    </item>
    <item>
      <title>Re: How do I define a stanza that applies to all stanzas in the same inputs.conf file?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-I-define-a-stanza-that-applies-to-all-stanzas-in-the-same/m-p/179263#M35949</link>
      <description>&lt;P&gt;This is not the way it works, they are no notion stanza limited to a single inputs.conf  or a single app.&lt;/P&gt;

&lt;P&gt;The parameter are specific to their specific stanza.&lt;BR /&gt;
The only exception is the [default] that is for all stanza (in all the apps)&lt;/P&gt;

&lt;P&gt;Maybe are you confused with the props.conf that may overlap.&lt;/P&gt;

&lt;P&gt;See the way splunk configuration merges, and use btool to verify :&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/Admin/Wheretofindtheconfigurationfiles"&gt;http://docs.splunk.com/Documentation/Splunk/latest/Admin/Wheretofindtheconfigurationfiles&lt;/A&gt;&lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Usebtooltotroubleshootconfigurations"&gt;http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Usebtooltotroubleshootconfigurations&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 27 May 2014 16:14:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-I-define-a-stanza-that-applies-to-all-stanzas-in-the-same/m-p/179263#M35949</guid>
      <dc:creator>yannK</dc:creator>
      <dc:date>2014-05-27T16:14:58Z</dc:date>
    </item>
    <item>
      <title>Re: How do I define a stanza that applies to all stanzas in the same inputs.conf file?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-I-define-a-stanza-that-applies-to-all-stanzas-in-the-same/m-p/179264#M35950</link>
      <description>&lt;P&gt;Oh. Well then. &lt;span class="lia-unicode-emoji" title=":confused_face:"&gt;😕&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 27 May 2014 19:15:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-I-define-a-stanza-that-applies-to-all-stanzas-in-the-same/m-p/179264#M35950</guid>
      <dc:creator>neiljpeterson</dc:creator>
      <dc:date>2014-05-27T19:15:31Z</dc:date>
    </item>
  </channel>
</rss>

