Difference Between Default and Local Folder in Splunk
Uploaded by
Leonardio perezDifference Between Default and Local Folder in Splunk
Uploaded by
Leonardio perezDifference between
Default and Local
folder in Splunk
Default Folder
The default folder contains the default
configuration files for a Splunk app or add-on.
M
Typically found at
$SPLUNK_HOME/etc/apps/your_app/default.
ha
The files in the default folder should never be
rs
edited directly by users.
They serve as the baseline settings.
Va
If an update to the app is installed, the default
folder can be overwritten, which would erase
any changes made directly within it.
Varsha M
Local Folder
The local folder contains user-defined
configuration files in Splunk App.
M
Typically found at
$SPLUNK_HOME/etc/apps/your_app/local.
ha
Configurations in the local folder take
rs
precedence over those in the default folder.
Used to customize or override the default
Va
settings without modifying the original app-
provided files. This ensures that custom
configurations are preserved even when the app
is updated.
Varsha M
Default vs Local Folder
M
ha
rs
Va
Varsha M
Varsha M
Specialist - Splunk Admin and Python
varshamdass@gmail.com
9042331695
@varshamohandass Varsha-Mohandass
varshamohandass varsha_mohandass
