Need an understanding on this below configuration:
we have the above configuration in splunk_TA_windows.Could you please let me know what does it mean when we have empty value assigned for it
@Gayathirikuppusamy, this is to override system default values (if present). You can provide your own settings in the App's local directory to set this value.
For details on the configuration refer to input.conf for Windows Event Log monitoring: