Is it possible to use a deployed app on a UF to add local configuration files for a separate app?

[cnestrud]

I'm considering using the deployment server to distribute an app per UF with settings specific to that UF. One app being used is splunk_ta_nix which uses local/inputs.conf to enable desired inputs. Is it possible to include this file in a separate app? The idea is that the OS of the UF would cause splunk_ta_nix to be installed, then the per-UF app would install splunk_ta_nix settings to enable specific inputs.

I considered using a scripted input to copy a file from the per-UF app directory to the etc/apps/splunk_ta_nix/local directory, but it doesn't look like that is possible on a universal forwarder.

[martin_mueller · Accepted solution]

That's possible, specific settings in your_host_specific_app/local/inputs.conf will override splunk_ta_nix/default/inputs.conf.

http://docs.splunk.com/Documentation/Splunk/6.3.3/admin/Wheretofindtheconfigurationfiles

[cnestrud]

"scripted input" should be "python script", though I'm hopeful that someone will mention a better solution.