topic Re: Adding a limits.conf under local in Dashboards & Visualizations

Adding a limits.conf under local

Dark_Ichigo — Thu, 07 Mar 2013 23:01:48 GMT

If I add a customized limits.conf under the system/local directory, will this override all of the file thats in the /system/default directory?, or will it just merge?

Re: Adding a limits.conf under local

sideview — Thu, 07 Mar 2013 23:34:48 GMT

It acts like a normal conf file, Whatever keys you put in whatever stanzas in the local file -- those keys will be overridden in the Splunk instance. The other keys not specified in the local file will be drawn from the default/limits.conf. So it will merge .

Re: Adding a limits.conf under local

Dark_Ichigo — Fri, 08 Mar 2013 00:48:13 GMT

Thanks!!!!

Re: Adding a limits.conf under local

jgedeon120 — Fri, 08 Mar 2013 02:51:52 GMT

Dark_Ichigo,

Take a look at the configuration file precedence. It will come in handy when trying to trouble shoot why something works for one user but not another.

http://docs.splunk.com/Documentation/Splunk/5.0.2/Admin/Wheretofindtheconfigurationfiles

Local folders are basically read before the defaults. Then what is set in the local files takes priority over the defaults. Think of it as a first in wins.

Example:

local/limits.conf
[thruput] maxKBps = 512
defualt/limits.conf
[thruput] maxKBps = 256

Your maxKBps is going to be 512, even though default says 256. It doesn't override it per-say, it ignores it because it is already set. Overriding something, something has to be set before it can be overridden. And with the order the config files are read/loaded, local conf files are before default conf files.