|
If I have a forwarder, a light forwarder, an indexer, and a search head, where do I need to make my configuration, particular those in props.conf and inputs.conf? Can each setting be done anywhere, or only some places? Does it make a difference where it is set? What happens if the settings are different in each place? Are the answers to the above questions different for each setting, and if so, is there a listing of these answers anywhere? Update:
I will be offering a bounty on this question. Winning the bounty will require a comprehensive and reasonably easy to read table or chart documenting substantially all
|
|
More detailed and extensive answer here: http://www.splunk.com/wiki/Where_do_I_configure_my_Splunk_settings%3F Light Forwarder Forwarder Indexer Search Head The spec file for the conf in question can usually clue in to where the settings need to be made Could you please edit that, to add linebreaks? :-) Thank you.
(18 Jan '10, 18:24)
V_at_Splunk
Link no longer works. http://www.splunk.com/wiki/Where_do_I_configure_my_Splunk_settings%3F
(03 Nov '11, 07:20)
rroberts
|
