topic Re: Is there a way to write a splunk query which displays our props.conf , transform.conf , indexes.conf configuarion as outputs in Splunk Search https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-write-a-splunk-query-which-displays-our-props/m-p/311167#M161523 <P>also, same goes for indexes and transforms so:<BR /> | rest /services/configs/conf-indexes<BR /> | rest /services/configs/conf-transforms<BR /> and then filter however you like</P> Wed, 05 Apr 2017 18:46:58 GMT adonio 2017-04-05T18:46:58Z Is there a way to write a splunk query which displays our props.conf , transform.conf , indexes.conf configuarion as outputs https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-write-a-splunk-query-which-displays-our-props/m-p/311165#M161521 <P>I would like to see in props.conf how data parsing is done </P> <P>My query should return results stating </P> <P>sourcetype TIME_FORMAT LINE_BREAKER TIME_PREFIX etc</P> Tue, 29 Sep 2020 13:32:52 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-write-a-splunk-query-which-displays-our-props/m-p/311165#M161521 nasamajh09 2020-09-29T13:32:52Z Re: Is there a way to write a splunk query which displays our props.conf , transform.conf , indexes.conf configuarion as outputs https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-write-a-splunk-query-which-displays-our-props/m-p/311166#M161522 <P>hi nasamajh09,<BR /> here is a rest query that brings all props data: <CODE>| rest /services/configs/conf-props</CODE> <BR /> now you can filter, for example: <CODE>| table title eai:appName eai:userName eai:acl.sharing TIME_FORMAT LINE_BREAKER TIME_PREFIX</CODE></P> <P>hope it helps</P> Wed, 05 Apr 2017 18:41:48 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-write-a-splunk-query-which-displays-our-props/m-p/311166#M161522 adonio 2017-04-05T18:41:48Z Re: Is there a way to write a splunk query which displays our props.conf , transform.conf , indexes.conf configuarion as outputs https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-write-a-splunk-query-which-displays-our-props/m-p/311167#M161523 <P>also, same goes for indexes and transforms so:<BR /> | rest /services/configs/conf-indexes<BR /> | rest /services/configs/conf-transforms<BR /> and then filter however you like</P> Wed, 05 Apr 2017 18:46:58 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-write-a-splunk-query-which-displays-our-props/m-p/311167#M161523 adonio 2017-04-05T18:46:58Z