I have seen many struggle with the btool and the some messy output of it. So I made an updated version that makes it far better to use.  Its made as an function, so you can add it to any start up script on your linux. It make use of color and sort all settings in groups to make it easy to find your settings. In green you see the stanza name. Yellow is each setting for the stanza.  And last in grey is the file that holds the setting.   btools () { # Handle input options if [[ "$1" == "-sd" || "$1" == "-ds" ]]; then opt="etc/system/default" file="$2" stanza="" search="$3" elif [[ "$1" == "-d" && "$2" == "-s" || "$1" == "-s" && "$2" == "-d" ]]; then opt="etc/system/default" file="$3" stanza="" search="$4" elif [[ "$1" == "-d" ]]; then opt="etc/system/default" file="$2" stanza="$3" search="$4" elif [[ "$1" == "-s" ]]; then opt="none" file="$2" stanza="" search="$3" else opt="none" file="$1" stanza="$2" search="$3" fi # If no options are given, show the options [[ -z "$file" ]] && echo -e " btools for Splunk v3.0 Jotne Missing arguments! usage: btools [OPTION] file [STANZA] [SEARCH] -d Do not show splunk default -s All stanza (only needed if search is added and no stanza) file=splunk config file without the .conf [stanza] = complete stanza name or just part of it [search] = search phrase or part of it Example: btools server general servername btools web " && return 1 # If options are not set, give default values [[ -z "$stanza" ]] && stanza=".*" || stanza=".*$stanza.*" [[ -z "$search" ]] && search="" ~/bin/splunk btool $file list --debug | awk -v reset="\033[m\t" \ -v yellow="\033[38;5;226m\t" \ -v green="\033[38;5;46m" ' # set the different ansi color used {sub(/\s+/,"#");split($0,p,"#")} # split the input p[1]=filename p[2]=rest of line p[2]~/^\[.*?\] *$/ {f=0} # if this is a stanza name set flag f=0 f && tolower(p[2])~tolower(search) { # if this is not stanza test if text is part of search or no seach split(p[2],s," ") # Store each stanza in its own group a[st s[1]]++ if(p[1]!~opt)print green st yellow p[2] reset p[1] # Print each block } p[2]~"^\\["stanza"\\]$" {f=1;st=p[2]} # Find next stans ' stanza="$stanza" search="$search" opt="$opt" }   Example: btools server general servername btools web Lets say you like to see all your custom setting in props.conf for the stansa regarding IP 10.36.30.90 and not show any default settings (-q) btools -q props 10.36.30.90   Give me customer setting for index shb_ad btools -q indexes shb_ad Homepath for the shb_ab index: btools -q indexes shb_ad homepath Give me all settings for index shb_ab (includes the default settings) (ps there are more lines than picture shows. btools indexes shb_ad Any suggestion to make it better is welcome 🙂 ... View more