Setup splunk using augeas when title has equal char in name

[koudis]

Hi,
I'm using augeas to setup Splunk configs.
But I'm not able to setup titles with equal char in the name.

I can print these titles.

augtool> print /files/opt/splunk/etc/system/local/server.conf
...
/files/opt/splunk/etc/system/local/server.conf/queue
/files/opt/splunk/etc/system/local/server.conf/queue/maxSize = "600MB"
/files/opt/splunk/etc/system/local/server.conf/queue=parsingQueue
/files/opt/splunk/etc/system/local/server.conf/queue=parsingQueue/maxSize = "6MB"
...

But I don't know how to setup them.

augtool> set /files/opt/splunk/etc/system/local/server.conf/queue=parsingQueue/maxSize 600MB
error: Invalid path expression
error: type error
/files/opt/splunk/etc/system/local/server.conf/queue=parsingQueue/maxSize|=|

Final config should be:

[queue]
maxSize=600MB
[queue=parsingQueue]
 maxSize=6MB

Does anyone know how to setup this type of config using augeas or another tool from CLI ?

[koudis · Accepted solution]

I had some old Splunk.aug lens in my system. Upgrade solved it.

/files/opt/splunk/etc/system/local/server.conf/target[7] = "queue"
/files/opt/splunk/etc/system/local/server.conf/target[7]/maxSize = "600MB"
/files/opt/splunk/etc/system/local/server.conf/target[8] = "queue=parsingQueue"
/files/opt/splunk/etc/system/local/server.conf/target[8]/maxSize = "6MB"

[koudis]

Just to describe it more deeply. You can setup it using puppet like this:

'server.conf-queue-agg':
        context     => "/files/opt/splunk/etc/system/local/server.conf",
        incl            => "/opt/splunk/etc/system/local/server.conf",
        lens            => "Splunk.lns",
        changes     => [
                    "set target[. = 'queue=aggQueue'] queue=aggQueue",
                    "set target[. = 'queue=aggQueue']/maxSize 200MB",
                ];