# Splunk

Parses /opt/splunk/etc/*, /opt/splunkforwarder/etc/system/local/*.conf and /opt/splunkforwarder/etc/apps/*/(default|local)/*.conf

Author: Tim Brigham, Jason Antman

Summary

Splunk | Parses /opt/splunk/etc/*, /opt/splunkforwarder/etc/system/local/*.conf and /opt/splunkforwarder/etc/apps/*/(default|local)/*.conf
Reference | https://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/AboutConfigurationFiles
License | This file is licenced under the LGPL v2+
Lens Usage | Works like IniFile lens, with anonymous section for entries without enclosing section and allowing underscore-prefixed keys.
Configuration files | This lens applies to conf files under /opt/splunk/etc and /opt/splunkforwarder/etc See filter.
Examples | The <Test_Splunk> file contains various examples and tests.

### Reference

https://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/AboutConfigurationFiles

### License

This file is licenced under the LGPL v2+

### Lens Usage

Works like IniFile lens, with anonymous section for entries without enclosing section and allowing underscore-prefixed keys.

### Configuration files

This lens applies to conf files under /opt/splunk/etc and /opt/splunkforwarder/etc See filter.

### Examples

The <Test_Splunk> file contains various examples and tests.

Close