Splunk Search

How to extract data from .conf file?

sjaitly
Engager

I need to extract ITSI app version from app.conf file
To display the data on a dashoboard 
I found a way sing the config parser but its not very clear

Labels (1)
0 Karma

manjunathmeti
SplunkTrust
SplunkTrust

hi @sjaitly,

You can get app.conf attrbutes using rest command, search this:

| rest /services/apps/local 
| table label version author title description

 

0 Karma

sjaitly
Engager

Hi @manjunathmeti,
Thanks for this solution but the issue is that I'm fetching this data from a diag file
and not from internal logs 
So, I don't think rest command would work.

0 Karma

manjunathmeti
SplunkTrust
SplunkTrust

Please share some sample data.

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...