get_configurations
Retrieve Splunk configuration settings from any .conf file to troubleshoot, audit, or inspect settings. Access entire files or specific stanzas with optional filters.
Instructions
Retrieves Splunk configuration settings from specified .conf files. Use this tool when you need to access or inspect Splunk configurations, such as for troubleshooting, auditing, or understanding settings in files like props.conf or inputs.conf. Access settings from any Splunk configuration file (props.conf, transforms.conf, inputs.conf, outputs.conf, etc.) either by entire file or specific stanza. Returns structured configuration data showing all settings and their values.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| conf_file | Yes | Configuration file name without .conf extension (e.g., 'props', 'transforms', 'inputs', 'outputs', 'server', 'web') | |
| stanza | No | Specific stanza name within the conf file to retrieve. If not provided, returns all stanzas in the file. | |
| app | No | Filter results to stanzas owned by this app (namespace). | |
| owner | No | Filter results to stanzas owned by this owner (user). |