I've been tasked with using btool (in debug mode) to find where the settings for the “onboarding” index was written by the GUI, and can't seem to figure out exactly how to do so. Any help is much appreciated!
Use the following command on CLI:
splunk btool indexes list --debug your_index_name
View solution in original post
Awesome, thank you!