Getting Data In

Are booleans in .conf files case sensitive?

samejgink
Explorer

I am troubleshooting an issue with an app and the searchoperatorKV error I am receiving is:

Invalid key-value parser, ignoring it, transform_name='my_transform'.

When investigating the transforms.conf file, the transform in question looks like this:

# transforms.conf
[my_transform]
   MV_ADD = True

My question is are the boolean values true and false case sensitive within the .conf files?

0 Karma
1 Solution

manjunathmeti
Champion

Boolean values can be set to True or true. Check if any invalid attribute for stanza my_transform in transforms.conf using btool commands.

$SPLUNK_HOME/bin/splunk btool check
$SPLUNK_HOME/bin/splunk btool transforms list --debug

View solution in original post

manjunathmeti
Champion

Boolean values can be set to True or true. Check if any invalid attribute for stanza my_transform in transforms.conf using btool commands.

$SPLUNK_HOME/bin/splunk btool check
$SPLUNK_HOME/bin/splunk btool transforms list --debug

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...