Splunk Enterprise

case_sensitive_match = 0 as default setting

rayar
Contributor

we would like to set the case_sensitive_match = 0 as default setting , so new lookup will be created not case sensitive 

will it work if I set it in transforms.conf under [default] ?

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Yes, that should work.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...