inputs.conf and custom apps: Can you have an inputs.conf with only?

[mellqui]

First time splunker here.

Can you have an inputs.conf with only:

[default]

host = <fqdn>

In etc/system/local while having custom apps with inputs in etc/apps? Or will the etc/system/local/inputs.conf mess with the custom app inputs?

[richgalloway · Accepted solution]

It's very common to have only those two lines in inputs.conf and it works, just be aware of config file precedence.  If the same attribute is in two or more config files, the setting in etc/system/local wins.  See https://docs.splunk.com/Documentation/Splunk/8.2.6/Admin/Wheretofindtheconfigurationfiles