#   Version 9.2.2.20240415
# DO NOT EDIT THIS FILE!
# Changes to default files will be lost on update and are difficult to
# manage and support.
#
# Please make any changes to system defaults by overriding them in
# apps or $SPLUNK_HOME/etc/system/local  
# (See "Configuration file precedence" in the web documentation).
#
# To override a specific setting, copy the name of the stanza and
# setting to the file where you wish to override it.
#
# This file has configuration for external search commands
#

##############
# defaults for all external commands, exceptions are below in individual stanzas

# type of script: 'python' (default), 'perl'
type = python
#default filename would be <stanza-name>.py for python, <stanza-name>.pl for perl and <stanza-name> otherwise

# is command streamable?
streaming = false
# does command generate events?
generating = false
# if generating = true, does command generate events in descending time order
generates_timeorder = false
# does command retain events (e.g. sort/dedup/cluster, or does it transform them e.g. stats)
retainsevents = false
# require pre-streaming operations?
requires_preop = false
# another possible setting is streaming_preop, which is a string that denotes the requested pre-streaming search string

# If set to true it will expect as input a head section + '\n' then the csv input
# should be set to true if you use splunk.Intersplunk
enableheader = true

# If set to true, output of script should be a header section + a blank line, then the csv output
outputheader = false

# If set to true it will pass an auth token on the start of the input.
passauth = false

# maximum data that can be passed to command (0 = no limit)
maxinputs = 50000

# issue performance warning if more than this many events are passed in as input (0 = never)
perf_warn_limit = 0

# does command support dynamic probing for settings via the 
# first argument being invoked == __GETINFO__ or __EXECUTE__ 
supports_getinfo = false

# allow the script to change the column order
changes_colorder = true

required_fields = *

# should extra precautions be taken when running a command like this
is_risky = false

# If set to "true", splunkd passes the serialized timezone information of the user to the script
# as part of the header. Requires that enableheader is set to "true"
pass_timezone = false

# end defaults
#####################