Dashboards & Visualizations

Adding a limits.conf under local

Dark_Ichigo
Builder

If I add a customized limits.conf under the system/local directory, will this override all of the file thats in the /system/default directory?, or will it just merge?

1 Solution

sideview
SplunkTrust
SplunkTrust

It acts like a normal conf file, Whatever keys you put in whatever stanzas in the local file -- those keys will be overridden in the Splunk instance. The other keys not specified in the local file will be drawn from the default/limits.conf. So it will merge .

View solution in original post

jgedeon120
Contributor

Dark_Ichigo,

Take a look at the configuration file precedence. It will come in handy when trying to trouble shoot why something works for one user but not another.

http://docs.splunk.com/Documentation/Splunk/5.0.2/Admin/Wheretofindtheconfigurationfiles

Local folders are basically read before the defaults. Then what is set in the local files takes priority over the defaults. Think of it as a first in wins.

Example:

local/limits.conf

[thruput]
maxKBps = 512

defualt/limits.conf

[thruput]
maxKBps = 256

Your maxKBps is going to be 512, even though default says 256. It doesn't override it per-say, it ignores it because it is already set. Overriding something, something has to be set before it can be overridden. And with the order the config files are read/loaded, local conf files are before default conf files.

sideview
SplunkTrust
SplunkTrust

It acts like a normal conf file, Whatever keys you put in whatever stanzas in the local file -- those keys will be overridden in the Splunk instance. The other keys not specified in the local file will be drawn from the default/limits.conf. So it will merge .

Dark_Ichigo
Builder

Thanks!!!!

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...