Getting Data In

Information on *.conf files

ppurokit
Path Finder

Hi All,

I have a very basic doubt with respect to all the *.conf files.

I have transforms.conf , props.conf and alert_actions.conf file in which I have some config written. But all these *.conf files are part of an App which i have created myself.

I know by default we can do all the changes and store it in ~splunk/etc/system/local.

But i want to do all the customizations and ship it as part of an App which i have developed and it should be global.

All your inputs are welcome.

0 Karma

kristian_kolb
Ultra Champion

This might be helpful (see "Make objects globally available")

http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/SetPermissions

/K

ppurokit
Path Finder

Thanks for he inputs. This really helped me.

So for adding alert_actions.conf in default.meta do i need to add like the below:

[alert_actions]
export = system

0 Karma
Get Updates on the Splunk Community!

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...