missing \local\inputs.conf file

[HMTODD]

I used the rest API Modular Input form to create a new input. I can see the input in the Web UI and I can edit. I thought the configuration would be saved to inputs.conf but I cannot find this file. Do I need to create /local/inputs.conf or is the input configuration being saved elsewhere?

[sbbadri · Accepted solution]

you can get inputs.conf from this location

$SPLUNK_HOME$/etc/apps/rest_ta/local/inputs.conf

or

$SPLUNK_HOME$/etc/apps/search/local/inputs.conf

[HMTODD]

There is no folder $SPLUNK_HOME$/etc/apps/rest_ta/local/inputs.conf. The inputs.conf located at $SPLUNK_HOME$/etc/apps/search/local/inputs.conf does not contain any of the modular inputs settings created for the Rest TA .

[sbbadri]

ah okay,
From GUI, settings->Data inputs-> REST. It will have one table. Check under "App" column corresponding to your rest inputs.

$SPLUNk_HOME$/etc/app/app shown in the tabluar column/local/

[HMTODD]

OK, so I can see the modular input in the Web UI at settings->Data inputs - >REST. In teh table presenting the app names is "launcher". When I look in $SPLUNK_HOME$/etc/apps/launcher/local/inputs.conf - Aha - there are my input settings.

Thanks!