Splunk Search

How to extract data from .conf file?

sjaitly
Engager

I need to extract ITSI app version from app.conf file
To display the data on a dashoboard 
I found a way sing the config parser but its not very clear

Labels (1)
0 Karma

manjunathmeti
SplunkTrust
SplunkTrust

hi @sjaitly,

You can get app.conf attrbutes using rest command, search this:

| rest /services/apps/local 
| table label version author title description

 

0 Karma

sjaitly
Engager

Hi @manjunathmeti,
Thanks for this solution but the issue is that I'm fetching this data from a diag file
and not from internal logs 
So, I don't think rest command would work.

0 Karma

manjunathmeti
SplunkTrust
SplunkTrust

Please share some sample data.

0 Karma
Get Updates on the Splunk Community!

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...