Getting Data In

What is the precedence for identical stanzas within a single conf file? Is this a valid configuration?

mlorch
Path Finder

Hi,

I'm facing the situation that there is the identical stanza twice within a single conf file.
E.g.
authorize.conf

[role_admin]
srchIndexesDefault = main

[role_admin]
srchIndexesDefault = _internal

I know the documentation for Attribute precedence within a single props.conf file, but this only describes the precedence defined by ASCII order. Not if the stanza is identical.

Verifying the configuration with btool, I get that the last listed entry rules. Which makes sense.

So my question is: Is this a valid configuration (despite the fact that this should be avoided)?

Thanks and best regards,
Max.

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

If it wasn't valid, btool would have flagged it. As you say, this situation should be avoided.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

If it wasn't valid, btool would have flagged it. As you say, this situation should be avoided.

---
If this reply helps you, Karma would be appreciated.

mlorch
Path Finder

Thanks. That's what I expected.

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...