Implementing Splunk 7, Third Edition - Third Edition

Using btool

To help preview merged configurations, we call on btool, a command-line tool that prints the merged version of configurations. The Splunk site has one of my favorite documentation notes of all time, as follows:

"btool is not tested by Splunk and is not officially supported or guaranteed. That said, it's what our Support team uses when trying to troubleshoot your issues."

With that warning in mind, btool has never steered me wrong. The tool has a number of functions, but the only one I have ever used is list, as follows:

$SPLUNK_HOME/bin/splunk cmd btool props list 

This produces 5,277 lines of output, which I won't list here. Let's list the impl_splunk_gen stanza by adding it to the end of the command line, as shown here:

/opt/splunk/bin/splunk ...