# Version 9.2.2.20240415 # # The following is an example collections.conf configuration. # # To use one or more of these configurations, copy the configuration block # into collections.conf in $SPLUNK_HOME/etc/system/local/. You must restart # Splunk to enable configurations. # # To learn more about configuration files (including precedence) please see # the documentation located at # http://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutconfigurationfiles # Note this example uses a compound acceleration. Please check collections.conf.spec # for restrictions on compound acceleration. [mycollection] field.foo = number field.bar = string accelerated_fields.myacceleration = {"foo": 1, "bar": -1}