Hi at all,
I know the meaning of file precedence in file configurations at index and search time, but what's the precedence in structural files as outputs.conf or deploymentclient.conf?
My need is:
So must I manually delete the old files in %SPLUNK_HOME/etc/system/local, or the new files override the other configurations because they have precedence?
Reading the documentation I think that the precedence is the one at Index time, so this means that files in %SPLUNK_HOME/etc/system/local have the precedence on the ones in TAs.
I'll start a lab to check this, but did anyone encountered this problem?
Ciao.
Giuseppe