# DO NOT EDIT THIS FILE!
# Changes to default files will be lost on update and are difficult to
# manage and support.
#
# Please make any changes to system defaults by overriding them in
# apps or $SPLUNK_HOME/etc/system/local
# (See "Configuration file precedence" in the web documentation).
#
# To override a specific setting, copy the name of the stanza and
# setting to the file where you wish to override it.
#
# This file contains possible attribute/value pairs for configuring
# Splunk's processing properties.
#

[splunk_telemetry]
DATETIME_CONFIG =
INDEXED_EXTRACTIONS = json
KV_MODE=none
NO_BINARY_CHECK = true
TRUNCATE=0
TIME_FORMAT=%s
TIMESTAMP_FIELDS=timestamp


[splunk_telemetry_log]
DATETIME_CONFIG =
INDEXED_EXTRACTIONS = json
KV_MODE=none
NO_BINARY_CHECK = true
TIME_FORMAT=%s
TIMESTAMP_FIELDS=time

[splunk_telemetry_diag]
DATETIME_CONFIG =
KV_MODE=none
NO_BINARY_CHECK = true
TIME_FORMAT=%s
TIMESTAMP_FIELDS=timestamp
# Disabling line merging allows
# us to submit multiple json events
# to the streaming receiver in one call.
# Be aware this requires each json event
# to be formatted on a single line.
SHOULD_LINEMERGE=false