Thanks 13tsavage, that helps! I see there is a conf_checker.rules file that contains the spec in plain text, even if it starts with "Warning: This may go out of date. Crossing fingers." 😄 ... View more

Thanks for the response! Odd that Splunk doesn't implement something so basic as running the data through some custom code for additional functionality, I expected that to be core to many add-ons. ... View more