configuration file


A file (also referred to as a conf file) that contains Splunk Enterprise (and apps) configuration information. Configuration files are stored in:

  • Default files (Do not edit these preconfigured files.): $SPLUNK_HOME/etc/system/default
  • Editable local files: $SPLUNK_HOME/etc/system/local
  • App files: $SPLUNK_HOME/etc/apps/

Splunk Enterprise and apps write configuration settings into configuration files. You can configure settings and processes by editing stanzas within copies of the default configuration files.

Was this article helpful to you? No Yes

How can we help?