https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337981#M62394 <P>@lfedak Thank you for your quick response! I mentioned this page in my question, it only provided a list of Common attributes at its end, not the full list of attributes for Universal Forwarder configuration that I am looking for.</P> Thu, 14 Sep 2017 00:26:47 GMT wdeng 2017-09-14T00:26:47Z https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337979#M62392 <P>In the Forwarder manual (<A href="http://docs.splunk.com/Documentation/Forwarder/6.6.3/Forwarder/Abouttheuniversalforwarder">http://docs.splunk.com/Documentation/Forwarder/6.6.3/Forwarder/Abouttheuniversalforwarder</A>), we have a section on "Configure the universal forwarder". It listed some example configuration tasks for universal forwarder. What I am looking for are complete references kind of documents listing all the available configurations for universal forwarder. </P> <P>On section "Configure forwarding with outputs.conf", at its end, we have a list of common attributes. Where can we find the complete list of attributes for outputs.conf for Universal Forwarder only. Respectively, the complete list of attributes for other .conf files for Universal Forwarder only?</P> Wed, 13 Sep 2017 19:19:27 GMT https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337979#M62392 wdeng 2017-09-13T19:19:27Z https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337980#M62393 <P>Hey @wdeng, have you seen this page in the documentation yet? <A href="http://docs.splunk.com/Documentation/Forwarder/6.6.3/Forwarder/Configureforwardingwithoutputs.conf">http://docs.splunk.com/Documentation/Forwarder/6.6.3/Forwarder/Configureforwardingwithoutputs.conf</A></P> Wed, 13 Sep 2017 23:30:32 GMT https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337980#M62393 lfedak_splunk 2017-09-13T23:30:32Z https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337981#M62394 <P>@lfedak Thank you for your quick response! I mentioned this page in my question, it only provided a list of Common attributes at its end, not the full list of attributes for Universal Forwarder configuration that I am looking for.</P> Thu, 14 Sep 2017 00:26:47 GMT https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337981#M62394 wdeng 2017-09-14T00:26:47Z https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337982#M62395 <P>-- Where can we find the complete list of attributes for outputs.conf for Universal Forwarder only.</P> <P>The choice of the documentation was to create one unified document and if there are deviations, they are being spelled out -</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.6.3/Admin/Outputsconf" target="_blank">outputs.conf</A></P> <P>A deviation -</P> <P>-- forceTimebasedAutoLB = [true|false]<BR /> * Forces existing streams to switch to newly elected indexer every<BR /> AutoLB cycle.<BR /> * On <STRONG>universal forwarders</STRONG>, use the EVENT_BREAKER_ENABLE and<BR /> EVENT_BREAKER settings in props.conf rather than forceTimebasedAutoLB<BR /> for improved load balancing, line breaking, and distribution of events.<BR /> * Defaults to false.</P> Tue, 29 Sep 2020 15:45:03 GMT https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337982#M62395 ddrillic 2020-09-29T15:45:03Z https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337983#M62396 <P>@ddrillic Thanks for the info! Your link for outputs.conf leads me to The Admin Manual's Configuration file reference section. It contains specs for all the configure files. That's great!</P> <P>What I am looking for is an index for Universal Forwarder that list all its applicable config attributes with the name of the config files containing them. </P> <P>An index table like that helps user to quickly find all the configure options the Universal Forwarder has. Take as an example, the limit.conf spec contains many configurable attributes, many of them don't apply to universal forwarder. </P> Thu, 14 Sep 2017 17:37:42 GMT https://community.splunk.com/t5/Getting-Data-In/Where-can-I-find-the-complete-documentation-of-configuration/m-p/337983#M62396 wdeng 2017-09-14T17:37:42Z