You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

225 lines
4.2 KiB

# Version 9.2.2.20240415
# DO NOT EDIT THIS FILE!
# Please make all changes to files in $SPLUNK_HOME/etc/system/local.
# To make changes, copy the section/stanza you want to change from $SPLUNK_HOME/etc/system/default
# into ../local and edit there.
#
# Configuration for external search commands
#
##############
[indextimerange]
python.version = latest
filename = indextimerange.py
generating = true
streaming = false
is_risky = false
[bucketdir]
python.version = latest
filename = bucketdir.py
supports_rawargs = true
is_risky = false
[createrss]
python.version = latest
filename = createrss.py
run_in_preview = false
streaming = false
required_fields =
changes_colorder = false
supports_rawargs = true
is_risky = true
[diff]
python.version = latest
filename = diff.py
supports_getinfo = true
enableheader = false
retainsevents = true
changes_colorder = false
overrides_timeorder = true
is_risky = false
[erex]
python.version = latest
filename = erex.py
retainsevents = true
overrides_timeorder = false
outputheader = true
supports_rawargs = true
is_order_sensitive = true
is_risky = false
[gauge]
python.version = latest
filename = gauge.py
supports_getinfo = true
enableheader = false
is_risky = false
[iconify]
python.version = latest
filename = iconify.py
streaming = true
retainsevents = true
overrides_timeorder = false
supports_rawargs = true
is_risky = false
[overlap]
python.version = latest
filename = sumindexoverlap.py
is_risky = false
[oldreturn]
python.version = latest
filename = return.py
supports_getinfo = true
streaming = false
changes_colorder = true
overrides_timeorder = true
outputheader = true
supports_rawargs = true
is_risky = false
[rawstats]
python.version = latest
filename = rawstats.py
streaming = true
retainsevents = true
overrides_timeorder = false
is_risky = false
[reltime]
python.version = latest
filename = reltime.py
streaming = true
retainsevents = true
overrides_timeorder = false
supports_multivalues = true
supports_rawargs = true
is_risky = false
[runshellscript]
python.version = latest
filename = runshellscript.py
passauth = true
required_fields =
is_risky = true
[scrub]
python.version = latest
filename = scrub.py
# streaming could be true, if you don't care about consistency of terms substituted across events
streaming = false
retainsevents = true
overrides_timeorder = false
supports_rawargs = true
is_risky = false
[sendemail]
python.version = latest
filename = sendemail.py
streaming = false
run_in_preview = false
passauth = true
required_fields =
changes_colorder = false
supports_rawargs = true
undo_scheduler_escaping = true
is_risky = true
supports_multivalues = true
pass_timezone = true
[trendline]
python.version = latest
filename = trendline.py
supports_getinfo = true
enableheader = false
retainsevents = true
changes_colorder = false
overrides_timeorder = false
is_risky = false
[x11]
python.version = latest
filename = deseasonal.py
supports_getinfo = true
enableheader = false
retainsevents = true
changes_colorder = false
overrides_timeorder = false
is_risky = false
[predict]
python.version = latest
filename = predict.py
supports_getinfo = true
enableheader = false
retainsevents = true
changes_colorder = false
overrides_timeorder = false
is_risky = false
[searchtxn]
python.version = latest
filename = searchtxn.py
streaming = false
enableheader = true
retainsevents = true
changes_colorder = true
overrides_timeorder = false
passauth = true
outputheader = true
generating = true
supports_rawargs = true
#supports_getinfo = true
is_risky = false
[findtypes]
python.version = latest
filename=typelearner.py
retainsevents = true
passauth = true
outputheader = true
supports_rawargs = true
is_risky = false
[windbag]
python.version = latest
filename = windbag.py
streaming = true
generating = true
is_risky = false
[streambag]
python.version = latest
filename = streambag.py
streaming = true
generating = stream
is_risky = false
[xmlkv]
python.version = latest
filename = xmlkv.py
streaming = true
is_risky = false
[xmlunescape]
python.version = latest
filename = xmlunescape.py
retainsevents = true
overrides_timeorder = false
is_risky = false
[xpath]
python.version = latest
filename = xpath.py
streaming = true
retainsevents = true
overrides_timeorder = false
supports_rawargs = true
is_risky = false

Powered by BW's shoe-string budget.