All Apps and Add-ons

missing \local\inputs.conf file

Explorer

I used the rest API Modular Input form to create a new input. I can see the input in the Web UI and I can edit. I thought the configuration would be saved to inputs.conf but I cannot find this file. Do I need to create /local/inputs.conf or is the input configuration being saved elsewhere?

Tags (1)
0 Karma
1 Solution

Motivator

you can get inputs.conf from this location

$SPLUNK_HOME$/etc/apps/rest_ta/local/inputs.conf

or

$SPLUNK_HOME$/etc/apps/search/local/inputs.conf

View solution in original post

0 Karma

Motivator

you can get inputs.conf from this location

$SPLUNK_HOME$/etc/apps/rest_ta/local/inputs.conf

or

$SPLUNK_HOME$/etc/apps/search/local/inputs.conf

View solution in original post

0 Karma

Explorer

There is no folder $SPLUNK_HOME$/etc/apps/rest_ta/local/inputs.conf. The inputs.conf located at $SPLUNK_HOME$/etc/apps/search/local/inputs.conf does not contain any of the modular inputs settings created for the Rest TA .

0 Karma

Motivator

ah okay,
From GUI, settings->Data inputs-> REST. It will have one table. Check under "App" column corresponding to your rest inputs.

$SPLUNk_HOME$/etc/app/app shown in the tabluar column/local/

0 Karma

Explorer

OK, so I can see the modular input in the Web UI at settings->Data inputs - >REST. In teh table presenting the app names is "launcher". When I look in $SPLUNK_HOME$/etc/apps/launcher/local/inputs.conf - Aha - there are my input settings.

Thanks!

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!