# Version 9.2.2.20240415 # DO NOT EDIT THIS FILE! # Please make all changes to files in $SPLUNK_HOME/etc/system/local. # To make changes, copy the section/stanza you want to change from $SPLUNK_HOME/etc/system/default # into ../local and edit there. # # Configuration for external search commands # ############## [indextimerange] python.version = latest filename = indextimerange.py generating = true streaming = false is_risky = false [bucketdir] python.version = latest filename = bucketdir.py supports_rawargs = true is_risky = false [createrss] python.version = latest filename = createrss.py run_in_preview = false streaming = false required_fields = changes_colorder = false supports_rawargs = true is_risky = true [diff] python.version = latest filename = diff.py supports_getinfo = true enableheader = false retainsevents = true changes_colorder = false overrides_timeorder = true is_risky = false [erex] python.version = latest filename = erex.py retainsevents = true overrides_timeorder = false outputheader = true supports_rawargs = true is_order_sensitive = true is_risky = false [gauge] python.version = latest filename = gauge.py supports_getinfo = true enableheader = false is_risky = false [iconify] python.version = latest filename = iconify.py streaming = true retainsevents = true overrides_timeorder = false supports_rawargs = true is_risky = false [overlap] python.version = latest filename = sumindexoverlap.py is_risky = false [oldreturn] python.version = latest filename = return.py supports_getinfo = true streaming = false changes_colorder = true overrides_timeorder = true outputheader = true supports_rawargs = true is_risky = false [rawstats] python.version = latest filename = rawstats.py streaming = true retainsevents = true overrides_timeorder = false is_risky = false [reltime] python.version = latest filename = reltime.py streaming = true retainsevents = true overrides_timeorder = false supports_multivalues = true supports_rawargs = true is_risky = false [runshellscript] python.version = latest filename = runshellscript.py passauth = true required_fields = is_risky = true [scrub] python.version = latest filename = scrub.py # streaming could be true, if you don't care about consistency of terms substituted across events streaming = false retainsevents = true overrides_timeorder = false supports_rawargs = true is_risky = false [sendemail] python.version = latest filename = sendemail.py streaming = false run_in_preview = false passauth = true required_fields = changes_colorder = false supports_rawargs = true undo_scheduler_escaping = true is_risky = true supports_multivalues = true pass_timezone = true [trendline] python.version = latest filename = trendline.py supports_getinfo = true enableheader = false retainsevents = true changes_colorder = false overrides_timeorder = false is_risky = false [x11] python.version = latest filename = deseasonal.py supports_getinfo = true enableheader = false retainsevents = true changes_colorder = false overrides_timeorder = false is_risky = false [predict] python.version = latest filename = predict.py supports_getinfo = true enableheader = false retainsevents = true changes_colorder = false overrides_timeorder = false is_risky = false [searchtxn] python.version = latest filename = searchtxn.py streaming = false enableheader = true retainsevents = true changes_colorder = true overrides_timeorder = false passauth = true outputheader = true generating = true supports_rawargs = true #supports_getinfo = true is_risky = false [findtypes] python.version = latest filename=typelearner.py retainsevents = true passauth = true outputheader = true supports_rawargs = true is_risky = false [windbag] python.version = latest filename = windbag.py streaming = true generating = true is_risky = false [streambag] python.version = latest filename = streambag.py streaming = true generating = stream is_risky = false [xmlkv] python.version = latest filename = xmlkv.py streaming = true is_risky = false [xmlunescape] python.version = latest filename = xmlunescape.py retainsevents = true overrides_timeorder = false is_risky = false [xpath] python.version = latest filename = xpath.py streaming = true retainsevents = true overrides_timeorder = false supports_rawargs = true is_risky = false