Solved: props.conf - Splunk Community

Getting Data In

Does props.conf go on a forwarder or on the main splunk server?

1 Solution

Solution

As in most cases, the answer is "It Depends". Particularly on what type of props.conf parameters you are talking about.

Perhaps a look here can help;

http://wiki.splunk.com/Where_do_I_configure_my_Splunk_settings

/Kristian

View solution in original post

Solution

As in most cases, the answer is "It Depends". Particularly on what type of props.conf parameters you are talking about.

Perhaps a look here can help;

http://wiki.splunk.com/Where_do_I_configure_my_Splunk_settings

/Kristian

Get Updates on the Splunk Community!

Splunk Asynchronous Forwarding Explained

Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. ...

How to Monitor AI Agents with Splunk Agent Observability

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...

Deep Dive: The Agentic SOC in Action with Enterprise Security Agents

Takeaways: Splunk Enterprise Security brings Agentic SOC capabilities into the analyst workflow. Agents ...