Security
Highlighted

How do I edit configuration files through Splunk Web?

Explorer

I would like to edit configuration files through Splunk Web instead of an editor. How do I do this?

Highlighted

Re: How do I edit configuration files through Splunk Web?

SplunkTrust
SplunkTrust

AFAIK, there is no native option to update the conf file directly. From many activities in Splunk Web, the conf files will get update, so what all conf files/entries you're looking to update from Splunk Web?

0 Karma
Highlighted

Re: How do I edit configuration files through Splunk Web?

Explorer

I am looking to edit the inputs and props files

0 Karma
Highlighted

Re: How do I edit configuration files through Splunk Web?

New Member

I want to update data masking regex expression in the props.conf file through splunk UI.

0 Karma
Highlighted

Re: How do I edit configuration files through Splunk Web?

SplunkTrust
SplunkTrust

If you're in 6.3 OR above, you can update props.conf from Settings->Source types (for sourcetype definitation) OR Settings-> Fields (for field extractionos/transformation).
Inputs.conf can be update (indirectly) from UI Settings->Data Inputs, for regular properties. The advanced properties should be updated only by Splunk Administrators who have in-depth knowledge about those properties, hence they are not exposed via UI.

Highlighted

Re: How do I edit configuration files through Splunk Web?

Influencer

Converted to answer

0 Karma
Highlighted

Re: How do I edit configuration files through Splunk Web?

Explorer

thank you somesoni2. thats what i needed to know.

0 Karma
Highlighted

Re: How do I edit configuration files through Splunk Web?

New Member

Hi somesoni2,
Thanks for your information, but i not found any option which can be update my props.conf file ,through which i will use data masking regex expression.

0 Karma
Highlighted

Re: How do I edit configuration files through Splunk Web?

Explorer