You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
70 lines
2.3 KiB
70 lines
2.3 KiB
5 months ago
|
# Version 9.2.2.20240415
|
||
|
|
# DO NOT EDIT THIS FILE!
|
||
|
|
# Changes to default files will be lost on update and are difficult to
|
||
|
|
# manage and support.
|
||
|
|
#
|
||
|
|
# Please make any changes to system defaults by overriding them in
|
||
|
|
# apps or $SPLUNK_HOME/etc/system/local
|
||
|
|
# (See "Configuration file precedence" in the web documentation).
|
||
|
|
#
|
||
|
|
# To override a specific setting, copy the name of the stanza and
|
||
|
|
# setting to the file where you wish to override it.
|
||
|
|
#
|
||
|
|
# This file has configuration for external search commands
|
||
|
|
#
|
||
|
|
|
||
|
|
##############
|
||
|
|
# defaults for all external commands, exceptions are below in individual stanzas
|
||
|
|
|
||
|
|
# type of script: 'python' (default), 'perl'
|
||
|
|
type = python
|
||
|
|
#default filename would be <stanza-name>.py for python, <stanza-name>.pl for perl and <stanza-name> otherwise
|
||
|
|
|
||
|
|
# is command streamable?
|
||
|
|
streaming = false
|
||
|
|
# does command generate events?
|
||
|
|
generating = false
|
||
|
|
# if generating = true, does command generate events in descending time order
|
||
|
|
generates_timeorder = false
|
||
|
|
# does command retain events (e.g. sort/dedup/cluster, or does it transform them e.g. stats)
|
||
|
|
retainsevents = false
|
||
|
|
# require pre-streaming operations?
|
||
|
|
requires_preop = false
|
||
|
|
# another possible setting is streaming_preop, which is a string that denotes the requested pre-streaming search string
|
||
|
|
|
||
|
|
# If set to true it will expect as input a head section + '\n' then the csv input
|
||
|
|
# should be set to true if you use splunk.Intersplunk
|
||
|
|
enableheader = true
|
||
|
|
|
||
|
|
# If set to true, output of script should be a header section + a blank line, then the csv output
|
||
|
|
outputheader = false
|
||
|
|
|
||
|
|
# If set to true it will pass an auth token on the start of the input.
|
||
|
|
passauth = false
|
||
|
|
|
||
|
|
# maximum data that can be passed to command (0 = no limit)
|
||
|
|
maxinputs = 50000
|
||
|
|
|
||
|
|
# issue performance warning if more than this many events are passed in as input (0 = never)
|
||
|
|
perf_warn_limit = 0
|
||
|
|
|
||
|
|
# does command support dynamic probing for settings via the
|
||
|
|
# first argument being invoked == __GETINFO__ or __EXECUTE__
|
||
|
|
supports_getinfo = false
|
||
|
|
|
||
|
|
# allow the script to change the column order
|
||
|
|
changes_colorder = true
|
||
|
|
|
||
|
|
required_fields = *
|
||
|
|
|
||
|
|
# should extra precautions be taken when running a command like this
|
||
|
|
is_risky = false
|
||
|
|
|
||
|
|
# If set to "true", splunkd passes the serialized timezone information of the user to the script
|
||
|
|
# as part of the header. Requires that enableheader is set to "true"
|
||
|
|
pass_timezone = false
|
||
|
|
|
||
|
|
# end defaults
|
||
|
|
#####################
|
||
|
|
|