-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathsettings.txt
More file actions
10 lines (9 loc) · 801 Bytes
/
settings.txt
File metadata and controls
10 lines (9 loc) · 801 Bytes
1
2
3
4
5
6
7
8
9
10
# The following are global settings used to change how load-splunk-data.sh runs
#
DEBUG_TIMESTAMP=F # T or F : Searches _internl component=DateParser OR component=DateParserVerbose for timestamp errors
DEBUG=F # T or F : Searches log_level=ERROR sourcetype=splunkd after each oneshot filtering on your sourcetype
SHOW_BTOOL=F # F or F : Shows btool 'splunk btool check' and 'splunk btool props list --debug'
SHOW_GREAT_8=T # T or F : Checks props.conf for the 'Great 8' or 'gr8' settings
SHOW_WALKLEX=F # T or F : Rolls hot-buckets to warm, then runs walklex to show indexed-fields
SHOW_EVENT_SUMMARY=T # T or F : Searches '...| stats count' and '| fieldsummary '
SHOW_INDEX_CONF=T # T or F : Displays status of index delete/create and reload of .conf files