All Apps and Add-ons

inputs.conf in one application and props.conf in other application? Will both synch

splunker12er
Motivator

Just wanted to know , that if i place the inputs.conf in one application and its corresponding props.conf in some other application where it may contain props of that native application also.

Will this work ?

I know that Splunk searches for the props.conf in App->local folder in first prioirty later in App->default folder and when no setting found it searches for configs in System->Local & later System->default

How does Splunk know the location when it is in some other location and prioritize ?

Which config files takes care all of this tasks?

0 Karma

lmyrefelt
Builder

"It will work" since you reference your sourcetype OR source in props.conf for whatever data you want to do something with.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Splunk will load inputs.conf and indextime sourcetype definitions from props.conf from all apps. In case of overwriting configurations, see http://docs.splunk.com/Documentation/Splunk/6.0.2/Admin/Wheretofindtheconfigurationfiles#Precedence_... for the precedence order.

Note, searchtime props.conf settings such as an EXTRACT-foo value will only be loaded according to the user/app context when searching, unless defined as global.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...

Updated Data Management and AWS GDI Inventory in Splunk Observability

We’re making some changes to Data Management and Infrastructure Inventory for AWS. The Data Management page, ...