Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
182 results
Sorted by:
11-29-2019
07:39 AM
Dear All,
When i was going through the document of splunk related to file precedence.
https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/Wheretofindtheconfigurationfiles
In About configuration...
10-11-2021
07:55 AM
Hello, regarding https://docs.splunk.com/Documentation/Splunk/8.2.2/ReleaseNotes/FixDatetimexml2020 - in case we upgrade Splunk version does /etc/datetime.xml is still less priority than p...
Labels
05-14-2020
09:31 PM
...attern.
Then configuration file on indexer is of higher priority than those on universal forwarder. Is that correct?
Thanks a lot.
/st wong
11-16-2017
11:17 PM
props definition is below, when i save it in app\search\local directory it doesn't work as expected{events are not broken properly}.
When saving the same configuration in system\local it works f...
01-12-2011
11:25 PM
1 Karma
I read the admin guide section on conf file precedence. It didn't see any info on the implications of a distributed setup.
Scenario:
search-head
indexer-1
indexer-2
I am thinking of having a p...
07-26-2019
09:10 AM
Hi everyone,
I have Splunk_TA_aws and Splunk_TA_aws_knowledgeonly deployed to a distributed splunk environment from a deployment server. On the heavy forwarders UI we have configured inputs w...
12-17-2015
06:35 AM
...rchIndexesDefault = _internal
I know the documentation for Attribute precedence within a single props.conf file, but this only describes the precedence defined by ASCII order. Not if the stanza is identical....
08-09-2018
03:29 PM
...riority over
Could you please let me know which TIME_FORMAT setting will be applied,.
from system/local? OR App1/local?
Conf. file location precedence is higher OR stanza type precedence i...
10-28-2019
11:14 AM
There is a lot of information regarding the order of the precedence of props.conf within a single Splunk server, but how about between servers? I assumed it would be the last server (i.e. the SH), b...
09-10-2020
05:39 AM
Hello all, I have what is probably a pretty basic question about configuration files. I know the precedence goes like this: 1. System local directory -- highest priority 2. App l...
Labels
- Labels:
-
indexer
