Building for the Splunk Platform

Configurations done on input, output, props.conf file



Can we see the details of the different configuration files(input, output and props) from the search query?

Tags (1)
0 Karma

Splunk Employee
Splunk Employee

You can see the running Configs via REST, but not the on disk configs, for the On disk configs you would need to create a custom search command that would call Btool. There have been a few written do to that,


| rest splunk_server=local /services/configs/conf-props | transpose

Splunk_server can be any sever

conf-props gets your props,
conf-transforms gets you transforms
conf-inputs gets you inputs
conf-server gets you server..... etc

Here is the Splunk Base app for Btool as well

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...