I'm here today, trying to answer the question "is the props.conf help file wording wrong here, or am I misunderstanding some double-negatives ?"
NO_BINARY_CHECK: is this the negative of BINARY_CHECK ?
What is the meaning of "NO_" here ? Is this 'NO' as in "DON'T" ?
If so, then setting this to TRUE should mean Splunk does NOT process binary files.
But the clarifying bullets indicate the opposite.
So who is getting tripped-up in double-negatives here, me ?... or is it Splunk ?!...
... View more