Documentation: 3.4.1
|  Print Version Contents
This page last updated: 07/01/08 01:07pm

app.conf

Configure app.conf to create dynamic fields for user entry in an application.

app.conf.spec 

# Copyright (C) 2005-2008 Splunk Inc.  All Rights Reserved.  Version 3.0 
#
# This file contains possible attribute/value pairs for creating user entry fields for your custom application.
# Configure available fields for user entry via app.conf.

# There is no default app.conf.  To set custom configurations, place an app.conf in 
# $SPLUNK_HOME/etc/system/local/. For examples, see app.conf.example.  
# You must restart Splunk to enable configurations.
# 
# To learn more about configuration files (including precedence) please see the documentation 
# located at http://www.splunk.com/doc/latest/admin/BundlesIntro.

[config:$STRING]
        * Name your stanza.
        * Preface with config:.
        * Set $STRING to any arbitrary identifier.
        
targetconf = <$CONFIG_FILE>
        * Target configuration file for changes.
        * There can be only one.
        * Any configuration file that is included in the application.
        * For example indexes, for indexes.conf.
        
targetstanza = <$STANZA_NAME>
        * Stanza name from application.
        
targetkey = <$ATTRIBUTE>
        * Attribute to set.
        
targetkeydefault = <$VALUE>
        * Default setting for attribute.
        * Can be empty for no default.
        
conflabel = <$LABEL>
        * Short description of configuration to display in Splunk Web.

app.conf.example

# Copyright (C) 2005-2008 Splunk Inc.  All Rights Reserved.  Version 3.0 
#
# The following are example app.conf configurations. Configure properties for your custom application.
#
# There is NO DEFAULT app.conf.
#
# To use one or more of these configurations, copy the configuration block into
# props.conf in $SPLUNK_HOME/etc/system/local/. You must restart Splunk to enable configurations.
#
# To learn more about configuration files (including precedence) please see the documentation 
# located at http://www.splunk.com/doc/latest/admin/BundlesIntro.

[config:coldindexpath]
targetconf=indexes
targetstanza=sampledata
targetkey=coldPath
targetkeydefault=$SPLUNK_DB/sampledata/colddb
conflabel=Cold DB Path for Sample Data Index

[config:thawedindexpath]
targetconf=indexes
targetstanza=sampledata
targetkey=thawedPath
targetkeydefault=$SPLUNK_DB/sampledata/thaweddb
conflabel=Thawed DB Path for Sample Data Index

[config:homeindexpath]
targetconf=indexes
targetstanza=sampledata
targetkey=homePath
targetkeydefault=$SPLUNK_DB/sampledata/db
conflabel=Home DB Path for Sample Data Index
Previous: alert_actions.conf    |    Next: audit.conf

Comments

No comments have been submitted.

Log in to comment.