I have a standalone Splunk environment - I have universal forwarders and an indexer/Deployment server which acts as the Search head also.
I have a deployment-app under $SPLUNK_HOME/etc/deployment-apps/my_inputs/local/inputs.conf and props.conf. The inputs.conf was recognized fine, but the props.conf changes weren't picked up.
When i put the props.conf under $SPLUNK_HOME/etc/apps/my-IDX/props.conf, alongside the indexes.conf, the changes were picked up.
Is there a reason why the props.conf wasn't picked up from deployment-app?
↧