get_configurations
Retrieve configuration settings from any Splunk .conf file for troubleshooting, auditing, or inspection. Get all stanzas or a specific stanza from files like props.conf or inputs.conf.
Instructions
Retrieves Splunk configuration settings from specified .conf files. Use this tool when you need to access or inspect Splunk configurations, such as for troubleshooting, auditing, or understanding settings in files like props.conf or inputs.conf. Access settings from any Splunk configuration file (props.conf, transforms.conf, inputs.conf, outputs.conf, etc.) either by entire file or specific stanza. Returns structured configuration data showing all settings and their values.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| conf_file | Yes | Configuration file name without .conf extension (e.g., 'props', 'transforms', 'inputs', 'outputs', 'server', 'web') | |
| stanza | No | Specific stanza name within the conf file to retrieve. If not provided, returns all stanzas in the file. | |
| app | No | Filter results to stanzas owned by this app (namespace). | |
| owner | No | Filter results to stanzas owned by this owner (user). |