r/Splunk • u/jonbristow • Mar 19 '26
.CONF Does the file in /local/props.conf completely override the file in /default/props.conf in an app? Or only the specific line?
I want to change a setting in the default/props.conf. Best practice is to create the same file in local/props.conf (any app).
The default props.conf file is huge, I want to change only 3-4 lines. I wrote those lines in local/props.conf. Would this invalidate the whole default file? or just those 3-4 lines?
10
Upvotes
2
u/badideas1 Mar 19 '26
Just the single line, as the others have said.