One comment about apps. When you are creating and using your own app then conf files should be in app/default directory when you are installing it. That situation should be stored also in git or other VCS. Then when you modify those using GUI those changes will be stored into app/local folder. BUT when you are taking any apps e.g. from splunkbase then you should put your local configuration into app/local or even create an additional app for your local change. In that way you could easily update into a newer version. ... View more