get_configurations
Retrieve Splunk configuration settings from .conf files like props.conf or inputs.conf for troubleshooting, auditing, or understanding settings. Access entire files or specific stanzas with structured data output.
Instructions
Retrieves Splunk configuration settings from specified .conf files. Use this tool when you need to access or inspect Splunk configurations, such as for troubleshooting, auditing, or understanding settings in files like props.conf or inputs.conf. Access settings from any Splunk configuration file (props.conf, transforms.conf, inputs.conf, outputs.conf, etc.) either by entire file or specific stanza. Returns structured configuration data showing all settings and their values.
Args: conf_file (str): Configuration file name without .conf extension (e.g., 'props', 'transforms', 'inputs', 'outputs', 'server', 'web') stanza (str, optional): Specific stanza name within the conf file to retrieve. If not provided, returns all stanzas in the file. app (str, optional): Filter results to stanzas owned by this app (namespace). owner (str, optional): Filter results to stanzas owned by this owner (user).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| conf_file | Yes | ||
| stanza | No | ||
| app | No | ||
| owner | No |