Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- How to configure default values for parameters on ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I am using C# SDK 2.0 and Visual Studio 2013 Extension for creating Modular Inputs. I am trying to understand the best way to specify default values for parameters, if it is even possible.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There are 2 ways that come to mind :
1) hard code some defaults in your C# code. But then they are fixed as they are in compiled code.
2) So perhaps better , ship your modular input with a default/inputs.conf file that defines a parent stanza with defaults.
So , your default/inputs.conf might look like :
[foo]
some_default_param = 123
And then when users setup stanzas they can inherit the default parameters or override them
[foo://mystanza]
abc=1
[foo://anotherstanza]
abc =2
some_default_param = 678
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
That is the perfect answer I was looking for.
Thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There are 2 ways that come to mind :
1) hard code some defaults in your C# code. But then they are fixed as they are in compiled code.
2) So perhaps better , ship your modular input with a default/inputs.conf file that defines a parent stanza with defaults.
So , your default/inputs.conf might look like :
[foo]
some_default_param = 123
And then when users setup stanzas they can inherit the default parameters or override them
[foo://mystanza]
abc=1
[foo://anotherstanza]
abc =2
some_default_param = 678
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I changed my input.conf file but not able to see my default value on splunk setting=>data=>input=>app=>new page
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Announcing Modern Navigation: A New Era of Splunk User Experience
Modernize your Splunk Apps – Introducing Python 3.13 in Splunk
Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...
