How can I configure Splunk to index its own conf files? Would there be any issues with doing this?
Or does Splunk already index those files, and if so, then where are they indexed?
The solution is within the SOS app to do btools to collect in a saved search:
| btools macros.conf | formatting commands | collect index=myConfIndex
View solution in original post
