Archive
Highlighted

Configuration order of precedence

Engager

This should be a softball for easy karma.

Can anybody tell me the order of precedence for configuration files?

As a specific example, for props.conf, I have

  1. /opt/splunk/etc/apps/my_silly_app/local/props.conf
  2. /opt/splunk/etc/users/my_silly_username/my_silly_app/local/props.conf
  3. /opt/splunk/etc/system/local/props.conf
  4. /opt/splunk/etc/system/default/props.conf

...to name a few

When going back and forth between UI and bash edits, I sometimes am not sure which I should adjust/delete/ignore compared to others.

Tags (2)
Highlighted

Re: Configuration order of precedence

Explorer

I could use some Karma.

See the Order of precedence section.
http://docs.splunk.com/Documentation/Splunk/4.3.4/Admin/Wheretofindtheconfigurationfiles

You can run btool to see all the configuration values in use by your Splunk instance.
http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Usebtooltotroubleshootconfigurati...