Get Configurations
get_configurationsRetrieve Splunk configuration settings from .conf files, filtering by app, owner, or stanza for troubleshooting and auditing.
Instructions
Retrieves Splunk configuration settings from specified .conf files. Use this tool when you need to access or inspect Splunk configurations, such as for troubleshooting, auditing, or understanding settings in files like props.conf or inputs.conf. Access settings from any Splunk configuration file (props.conf, transforms.conf, inputs.conf, outputs.conf, etc.) either by entire file or specific stanza. Returns structured configuration data showing all settings and their values.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| app | No | Filter results to stanzas owned by this app (namespace). | |
| owner | No | Filter results to stanzas owned by this owner (user). | |
| stanza | No | Specific stanza name within the conf file to retrieve. If not provided, returns all stanzas in the file. | |
| conf_file | Yes | Configuration file name without .conf extension (e.g., 'props', 'transforms', 'inputs', 'outputs', 'server', 'web') |