Splunk Dev

How to access the configuration settings in custom config file based on values?

troyward
Explorer

I'm trying to build an app that requires some configurations to be saved that affect the output of some of the searches (i.e if something should be counted or not). My idea is to save these as a custom config file in apps local directory (mycustomfile.conf) but my problem is, how can I access the configuration settings within it to modify the searches based on their values? I've read about creating a setup.xml file and think I understand that, just not sure how to actually put those values into use.

Labels (1)

pierznj
Engager

My kingdom for an answer to this question! (Sorry I don't really have a kingdom.)

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...