configuration file

⌘K

noun

A file (also referred to as a conf file) that contains Splunk Enterprise (and apps) configuration information. Configuration files are stored in:

  • Default files (Do not edit these preconfigured files.): $SPLUNK_HOME/etc/system/default
  • Editable local files: $SPLUNK_HOME/etc/system/local
  • App files: $SPLUNK_HOME/etc/apps/

Splunk Enterprise and apps write configuration settings into configuration files. You can configure settings and processes by editing stanzas within copies of the default configuration files.