November 2018
Beginner
298 pages
7h 51m
English
Splunk configuration files have many overlapping settings in many different locations; determining the final configuration that Splunk will use from the precedence-based merged values of all of these settings can be an arduous task. Splunk provides a CLI tool, called btool, in the $SPLUNK_HOME/bin directory which displays the merged on-disk configuration values from any of the .conf files in the system. Note again that btool displays the on-disk configuration file settings—if you change a setting and don't restart Splunk, btool will reflect the new settings, but that's not what will necessarily be running in-memory:
splunk help btool # display usage and list of optionssplunk btool check # check all configurations for typos/errors
Read now
Unlock full access