Security

How do I edit configuration files through Splunk Web?

jarrett15
Explorer

I would like to edit configuration files through Splunk Web instead of an editor. How do I do this?

pfender
Explorer

somesoni2
Revered Legend

If you're in 6.3 OR above, you can update props.conf from Settings->Source types (for sourcetype definitation) OR Settings-> Fields (for field extractionos/transformation).
Inputs.conf can be update (indirectly) from UI Settings->Data Inputs, for regular properties. The advanced properties should be updated only by Splunk Administrators who have in-depth knowledge about those properties, hence they are not exposed via UI.

satishachary199
New Member

Hi somesoni2,
Thanks for your information, but i not found any option which can be update my props.conf file ,through which i will use data masking regex expression.

0 Karma

masonmorales
Influencer

Converted to answer

0 Karma

jarrett15
Explorer

thank you somesoni2. thats what i needed to know.

0 Karma

somesoni2
Revered Legend

AFAIK, there is no native option to update the conf file directly. From many activities in Splunk Web, the conf files will get update, so what all conf files/entries you're looking to update from Splunk Web?

0 Karma

satishachary199
New Member

I want to update data masking regex expression in the props.conf file through splunk UI.

0 Karma

jarrett15
Explorer

I am looking to edit the inputs and props files

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

Maintaining data integrity across security and analytics pipelines is an ongoing challenge. Data ...

[Puzzles] Solve, Learn, Repeat: Family Trees

This puzzle (first published here is based on finding grandparents and grandchildren (inspired by a question ...

Break the Build: Inside the KubeDoom Lounge at .conf26

    You step up to the machine. The pixelated corridors of a certain 1993 FPS load in front of you, EMP Pulse ...