I would like to see in props.conf how data parsing is done
My query should return results stating
sourcetype TIME_FORMAT LINE_BREAKER TIME_PREFIX etc
hi nasamajh09,
here is a rest query that brings all props data: | rest /services/configs/conf-props
now you can filter, for example: | table title eai:appName eai:userName eai:acl.sharing TIME_FORMAT LINE_BREAKER TIME_PREFIX
hope it helps
also, same goes for indexes and transforms so:
| rest /services/configs/conf-indexes
| rest /services/configs/conf-transforms
and then filter however you like