I setup a dir monitor with a whitelist through splunk web- now I'm looking for the specifics to find the CRCSalt settings etc but this input I put in doesn't show up in $SPLUNK_HOME/etc/system/local/inputs.conf WHY??? where is it?
NVM found it with
/opt/splunk/bin/splunk btool inputs list --debug
View solution in original post