Getting Data In

props.conf

peter_gianusso
Communicator

Does props.conf go on a forwarder or on the main splunk server?

Tags (1)
0 Karma
1 Solution

kristian_kolb
Ultra Champion

As in most cases, the answer is "It Depends". Particularly on what type of props.conf parameters you are talking about.

Perhaps a look here can help;

http://wiki.splunk.com/Where_do_I_configure_my_Splunk_settings

/Kristian

View solution in original post

0 Karma

kristian_kolb
Ultra Champion

As in most cases, the answer is "It Depends". Particularly on what type of props.conf parameters you are talking about.

Perhaps a look here can help;

http://wiki.splunk.com/Where_do_I_configure_my_Splunk_settings

/Kristian

0 Karma
Get Updates on the Splunk Community!

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...