Splunk

Parses /opt/splunk/etc/*, /opt/splunkforwarder/etc/system/local/*.conf and /opt/splunkforwarder/etc/apps/*/(default|local)/*.conf

Author: Tim Brigham, Jason Antman

Summary

Splunk	Parses /opt/splunk/etc/, /opt/splunkforwarder/etc/system/local/.conf and /opt/splunkforwarder/etc/apps//(default\|local)/.conf
Reference	https://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/AboutConfigurationFiles
License	This file is licenced under the LGPL v2+
Lens Usage	Works like IniFile lens, with anonymous section for entries without enclosing section and allowing underscore-prefixed keys.
Configuration files	This lens applies to conf files under /opt/splunk/etc and /opt/splunkforwarder/etc See filter.
Examples	The <Test_Splunk> file contains various examples and tests.

This file is licenced under the LGPL v2+

Works like IniFile lens, with anonymous section for entries without enclosing section and allowing underscore-prefixed keys.

This lens applies to conf files under /opt/splunk/etc and /opt/splunkforwarder/etc See filter.

The <Test_Splunk> file contains various examples and tests.