literals.conf

# This file contains possible attribute/value pairs for configuring externalized strings in 
# literals.conf.
#
# There is a literals.conf in the default bundle.  To set custom configurations, place a
# literals.conf in your own custom bundle directory.
#
# For help creating a bundle directory, or to learn more about bundles (including bundle precedence)
# please see the documentation located at http://www.splunk.com/doc/latest/admin/bundleconfig.
#
# For the full list of all literals that can be overridden, check out
# $SPLUNK_HOME/etc/bundles/default/literals.conf.

[cli]

#******************************************************************************#
# UI
#******************************************************************************
# In general, strings in the [ui] stanza can be changed if you follow these guidelines.
# NOTE: Do not add or remove any occurrences of "%s", or reorder their positions. 

[ui]

SEARCH_TERM_TIME_FORMAT = %m/%d/%Y:%H:%M:%S
    * Used for starttime:: and endtime:: searchterms, across all of SplunkWeb. 
    * IMPORTANT: Swap %m and %d for European date formats. 
    * In general, however the full range of format strings is not supported, and other changes or 
    omissions may cause significant problems in the UI.

SEARCH_RESULTS_TIME_FORMAT = %m/%d/%Y %H:%M:%S
    * This is the general format string for events and timeline.
    * For the search results themselves, Splunk replaces four-digit %Y with two-digit %y.
    * When changing or swapping values, see above IMPORTANT note above.

# The following messages display in SplunkWeb. You can change the string after the = to anything you want.

HTTP_UNAUTHORIZED_MESSAGE = You are not logged in with a valid username for Splunk.
FUNCTIONALITY_UNAVAILABLE_WHILE_HOSTED_MESSAGE = This feature is not available on the demo version.
PASSWORDS_DONT_MATCH_MESSAGE = The passwords you typed do not match.
FULL_NAME_CANNOT_BE_BLANK_MESSAGE = The fullname field cannot be blank.
NAME_CANNOT_BE_BLANK_MESSAGE = The username field cannot be blank.

UNABLE_TO_CONNECT_MESSAGE = Could not connect to splunkd at %s.

REFRESH_LINK_TEXT = Refresh
PRO_SERVER_LOGIN_HEADER = Login to Splunk
FREE_SERVER_WELCOME_HEADER = Welcome to Splunk

LOGGED_IN_AS = Logged in as 
HELP_LINK_TEXT = Help
ABOUT_LINK_TEXT = About

#******************************************************************************
# UI chrome
#******************************************************************************

PRO_VERSION_WINDOW_TITLE = Splunk %s
FREE_VERSION_WINDOW_TITLE = Splunk %s

SERVER_RESTART_MESSAGE_ADMIN = You need to restart the Splunk Server for your changes to take effect. <span class="divider">|</span> To restart, go to the <a href="/admin/settings/control">Server &gt; Control</a> screen.
SERVER_RESTART_MESSAGE = This Splunk Server's configuration has been changed.  The server needs to be restarted by an administrator.

#******************************************************************************
# UI-XSL settings
# Strings in the [ui-xsl] stanza can be changed here.
#******************************************************************************

[ui-xsl]

#
# saved searches
#

NO_SAVED_SPLUNKS_MESSAGE = You have no Saved Searches
NO_LIVE_SPLUNKS_MESSAGE = Alerts are scheduled searches that can alert you via email, RSS or shell script.
NO_ALERT_HISTORY_MESSAGE = None

#
# distributed
#

HAS_NO_SPLUNKTCP_PEERS = has not received data from any servers.
HAS_NO_SPLUNKTCP_PEERS_BUT_IS_LISTENING = is listening on port <xsl:value-of select='/envelope/distributedOverview/singleReceivingPort' />, but has not received any data.
HAS_NO_SEARCH_PEERS = is not distributing search requests to any servers.
HAS_NO_SEARCH_PEERS_BUT_IS_DISTRIBUTED = has distributed search enabled, but no servers configured.
HAS_NO_DISCOVERED_SERVERS = None
HAS_NO_FORWARDING_PEERS = is not forwarding data.

#
# tooltips 
#
FILTER_ROW_TOOLTIP = click to restrict your search to this

#
# byte quota / EULA licensing
#

MAX_VIOLATIONS_HIT = Search is blocked until you drop below 7 violations in the most recent 30 days. To  upgrade, call us (1.866.GET.SPLUNK)  or visit <a target="_blank" href="http://www.splunk.com/store/home">splunk.com/store</a>.
# currently set to 1 week = 604800 seconds
BYTE_QUOTA_VIOLATION_MESSAGING_PERIOD =  604800
BYTE_QUOTA_EXCEEDED_MESSAGE_SEVERE_PRO  = Your index exceeded your %s/day limit&#8212;this makes %s times.  To  upgrade, call us (1.866.GET.SPLUNK)  or visit <a target="_blank" href="http://www.splunk.com/store/home">splunk.com/store</a>.
BYTE_QUOTA_EXCEEDED_MESSAGE_SEVERE_FREE = Your index exceeded the free %s/day limit&#8212;this makes %s  times.  Sign up for a <a target="_blank" href="http://www.splunk.com/r/pro_free_trial ">30-day free trial</a> of Splunk.
BYTE_QUOTA_EXCEEDED_MESSAGE_SEVERE_PRO  = Your index exceeded your %s/day limit again.  Do you need Splunk in  a larger size?  Call us (1.866.GET.SPLUNK) or visit <a target="_blank" href="http://www.splunk.com/store/home">splunk.com/store</a>.
BYTE_QUOTA_EXCEEDED_MESSAGE_SEVERE_FREE = Your index exceeded the free %s/day limit on new index contents  again.  Do you need more room?  Sign up for a <a target="_blank" href="http://www.splunk.com/r/pro_free_trial">30-day free trial</a> of Splunk.
BYTE_QUOTA_EXCEEDED_MESSAGE_MILD_PRO = Your index exceeded your %s/day limit.  Do you need Splunk in a  larger size?  Call us (1.866.GET.SPLUNK) or visit the <a target="_blank" href= "http://www.splunk.com/store/home">Splunk Store</a>.
BYTE_QUOTA_EXCEEDED_MESSAGE_MILD_FREE = Your index exceeded the free %s/day limit on new index contents.   Sign up for a <a target="_blank" href="http://www.splunk.com/r/pro_free_trial">30- day free trial</a> of Splunk.

#what does this =?
BYTE_QUOTA_EXCEEDED_MESSAGE_RECENT_FREE = Your index exceeded the free %s/day limit on new index contents  again.  Do you need more room?  Sign up for a <a target="_blank" href="http://www.splunk.com/r/pro_free_trial">30-day free trial</a> of Splunk.
BYTE_QUOTA_EXCEEDED_MESSAGE_RECENT_PRO = Your index exceeded your %s/day limit again.  Do you need Splunk in  a larger size?  Call us (1.866.GET.SPLUNK) or visit <a target="_blank" href="http://www.splunk.com/store/home">splunk.com/store</a>.

UNLICENSED_NOTIMELEFT_MESSAGE = This is an expired copy of Splunk. To use it, enter a <a href="/admin/license">license</a>.
UNLICENSED_SOMETIMELEFT_MESSAGE = Your trial Enterprise license expires in %s %s. To buy an Enterprise license, go to the Splunk <a target="_blank" href="http://www.splunk.com/store/home">Store</a>. 

TWO_DOT_X_MESSAGE_LOGIN = Splunk 3.0 requires a new license key. Please contact <a href="mailto:support@splunk.com">support@splunk.com</a> to get a new license key.
LICENSE_EXPIRE_MESSAGE_LOGIN = This is an expired copy of Splunk. To revert to the free version of Splunk copy $SPLUNK_HOME/etc/splunk-free.license over $SPLUNK_HOME/etc/splunk.license. To renew, visit <a target="_blank"  href="http://www.splunk.com/r/renew">splunk.com/r/renew</a>.
LICENSE_EXPIRE_MESSAGE = Your Splunk license expires on %s. To renew, visit <a target="_blank"  href="http://www.splunk.com/r/renew">splunk.com/r/renew</a>.
LICENSE_HAS_EXPIRED_MESSAGE = Your Splunk license expired on %s. To renew, visit <a target="_blank"  href="http://www.splunk.com/r/renew"> splunk.com/r/renew</a>.
MAX_VIOLATIONS_HIT = You have exceeded your daily limit 3 times in the past 30 days.  To  upgrade, call us (1.866.GET.SPLUNK)  or visit <a target="_blank" href="http://www.splunk.com/store/home">splunk.com/store</a>.

#
# user conversion messaging
#

PRO_ONLY_FEATURE_COOKED_RECEIVING = This feature requires a Splunk Enterprise license.<br/><br/><a href='http://www.splunk.com/r/signup/'>Sign up</a> and get a 30 day trial enterprise license.

PRO_ONLY_FEATURE_DISTRIBUTED_SEARCH = This feature requires a Splunk Enterprise license.<br/><br/><a href='http://www.splunk.com/r/signup/'>Sign up</a> and get a 30 day trial enterprise license.

PRO_ONLY_FEATURE_AUTHENTICATION_CONFIGURATION = Authentication Configuration requires a Splunk enterprise license. This feature lets you specify how Splunk authenticates users -- by Splunk server, LDAP or ActiveDirectory. Splunk is currently running with a free license, which has no access controls. <br/><br/><a href='/admin/license/upgrade'>Get</a> a trial enterprise license. <a href='http://www.splunk.com/r/free_vs_enterprise' target='splunk'>Compare</a> free versus enterprise.

PRO_ONLY_FEATURE_LIVE_SPLUNKS = Alerts require a Splunk license. <a href='/admin/license/upgrade'>Sign up</a> for a free trial enterprise license.

#SORRY about the lack of newlines, but bundles get upset with newlines in this particular key for some reason, and spit out another key with keyname=<a href
GENERIC_FREE_GET_ENTERPRISE_MESSAGE = <p>You are running Splunk with a Free license which allows you to index up to 500MB a day.</p><p>With an Enterprise license you get:</p><ul><li>Higher data indexing volumes</li><li>Multiple user accounts and access controls</li><li>Distributed search and data routing</li><li>Deployment management</li></ul><p><a href="http://www.splunk.com/r/signup">Get a trial Enterprise license.</a></p>

LOGIN_PAGE_FREE_GET_ENTERPRISE_MESSAGE = <p>You are running Splunk with a Free license.</p><p>You can index up to 500MB a day.</p><p>When you upgrade to an Enterprise license you get:</p><ul><li>Higher data indexing volumes</li><li>Multiple user accounts and access controls</li><li>Distributed search and data routing</li><li>Deployment management</li></ul><p>Sign-up and get a 30 day trial Enterprise license.</p><div class="buttonRow"><div class="primary"><a href="http://www.splunk.com/r/signup" target="splunk"><input type="button" name="submit" value="Get license"/></a></div></div>

RESTRICTED_FEATURE_PAGE_GENERIC_FREE_GET_ENTERPRISE_MESSAGE = <p>You are running Splunk with a Free license. This feature requires an Enterprise license.</p><p>With an Enterprise license you get:</p><ul><li>Higher data indexing volumes</li><li>Multiple user accounts and access controls</li><li>Distributed search and data routing</li><li>Deployment management</li></ul><p><a href="http://www.splunk.com/r/signup">Sign up</a> and get a 30 day trial enterprise license.</p><p>Already have an Enterprise license? Update your license <a href="/admin/license">here</a>.</p>

ADMIN_TAB_GENERIC_FREE_GET_ENTERPRISE_MESSAGE = <p>You are running Splunk with a Free license.</p><p>With an Enterprise license you get:</p><ul><li>Higher data indexing volumes</li><li>Multiple user accounts and access controls</li><li>Distributed search and data routing</li><li>Deployment management</li></ul><p><a href="http://www.splunk.com/r/signup">Sign up</a> and get a 30 day trial enterprise license.</p>

FREE_VERSION_NAGWARE_STRING = You are running Splunk with a Free license. <a href="http://www.splunk.com/r/signup" target="_blank">Sign-up</a> and get a 30 day trial Enterprise license.

#
# DATAINPUTS STRINGS
#

NO_DATA_INPUTS_CONFIGURED = None
INTERNAL_SINKHOLE_LABEL = Spooled Files and Directories
DYNAMIC_TAIL_LIST_LABEL = Contents of
DATA_INPUT_ADD_INPUT_LABEL = Add input
DATA_INPUT_ADD_FILE_LABEL = Add file
DATA_INPUT_NO_ACTION_LABEL = None
DATA_INPUT_EDIT_LABEL = Edit
DATA_INPUT_REMOVE_LABEL = Remove
ACCEPT_CONNECTIONS_QUESTION = Accept connections from all hosts?

ADMIN_LINK_TEXT = Admin
NON_ADMIN_USER_ADMIN_LINK_TEXT = My Account
SEARCH_LINK_TEXT = Search

# //////////////////////////////////////////////////////////////////////////////
# saved searches admin
# //////////////////////////////////////////////////////////////////////////////

[ui-admin-section-labels-/admin/saved]
query = Search
name = Name
isGlobal = Share with all users?
cronschedule = Run every
advsched = Cron schedule
action = Action
nextrun = Next run
counttype = When
relation = becomes
quantity = this number
enableSched = Run this search on a schedule
sendresults = Attach results in body of email
action_email = Send email (comma-separated list of email addresses)
action_rss = Create an RSS feed
action_script = Trigger shell script
tags = Tag

# //////////////////////////////////////////////////////////////////////////////
# user admin
# //////////////////////////////////////////////////////////////////////////////

[ui-admin-section-labels-/admin/users]
name = Username
realName = Full name
userType = Role

# //////////////////////////////////////////////////////////////////////////////
# auth admin
# //////////////////////////////////////////////////////////////////////////////

[ui-admin-section-labels-/admin/settings/auth]
host = Host
port = Port
SSLEnabled = SSL enabled
bindDN = Bind DN
bindDNpassword = Bind DN password
userBaseDN = User base DN
groupBaseDN = Group base DN
userNameAttribute = User name attribute
realNameAttribute = Real name attribute
groupNameAttribute = Group name attribute
groupMemberAttribute = Group member attribute
groupMappingAttribute = Group mapping attribute
userBaseFilter = User base filter
groupBaseFilter = Group base filter
failsafeLogin = Failsafe user
failsafePassword = Failsafe password

# Copyright (C) 2005-2008 Splunk Inc.  All Rights Reserved.  Version 3.0 
#
# This file contains an example literals.conf.  Use this file to configure the externalized strings
# in Splunk.
#
# To use one or more of these configurations, copy the configuration block into
# literals.conf in your own custom bundle.
#
# For help creating a bundle directory, or to learn more about bundles (including bundle precedence)
# please see the documentation located at http://www.splunk.com/doc/latest/admin/bundleconfig.
#
# For the full list of all literals that can be overridden, consult the far longer list in 
# $SPLUNK_HOME/etc/bundles/default/literals.conf
#
# NOTE: When strings contain "%s", do not add or remove any occurrences of %s, or reorder their positions. 
# NOTE: When strings contain HTML tags, take special care to make sure that all tags and quoted
# attributes are properly closed, and that all entities such as & are escaped.

# //////////////////////////////////////////////////////////////////////////////
# UI/Appserver embedded strings
# //////////////////////////////////////////////////////////////////////////////

[ui]

# -------------
# to switch to european date format, use these values instead
SEARCH_TERM_TIME_FORMAT    = %d/%m/%Y:%H:%M:%S
SEARCH_RESULTS_TIME_FORMAT = %d/%m/%Y %H:%M:%S
# -------------

PRO_SERVER_LOGIN_HEADER = Login to Splunk (guest/guest)

INSUFFICIENT_DISK_SPACE_ERROR = The server's free disk space is too low.  Indexing will temporarily pause until more disk space becomes available.

SERVER_RESTART_MESSAGE_ADMIN = You need to restart the Splunk Server for your changes to take effect. <span class="divider">|</span> To restart, go to the <a href="/admin/settings/control">Server &gt; Control</a> screen.
SERVER_RESTART_MESSAGE = This Splunk Server's configuration has been changed.  The server needs to be restarted by an administrator.

UNABLE_TO_CONNECT_MESSAGE = Could not connect to splunkd at %s.