{"id":557,"date":"2025-11-18T10:37:49","date_gmt":"2025-11-18T10:37:49","guid":{"rendered":"https:\/\/www.octamis.com\/octamis-blog\/?p=557"},"modified":"2025-11-18T13:56:30","modified_gmt":"2025-11-18T13:56:30","slug":"splunk-v10-effective-configuration","status":"publish","type":"post","link":"https:\/\/www.octamis.com\/octamis-blog\/splunk-v10-effective-configuration\/","title":{"rendered":"Splunk v10 Effective Configuration"},"content":{"rendered":"\n<p>The <strong>Effective Configuration Add-On <\/strong>saves time and eliminates the need to contact other teams if you&#8217;re not managing all Splunk elements, helping you access the information you need in seconds instead of days.<\/p>\n\n\n\n<p>Using the<strong> Effective Configuration Add-On<\/strong> also allows you to view the current effective configuration on selected agents and check parameter&#8217;s values set in the following files:<\/p>\n\n\n\n<ul>\n<li><code>inputs.conf<\/code><\/li>\n\n\n\n<li><code>outputs.conf<\/code><\/li>\n\n\n\n<li><code>deploymentclient.conf<\/code><\/li>\n\n\n\n<li><code>server.conf<\/code><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Installation<\/h3>\n\n\n\n<p>You have to download the application for Effective Configuration, then untar the<code> .tgz <\/code>file in <code>etc\/deployment-apps<\/code> ont the Agent Management server:<\/p>\n\n\n\n<p><code>tar zxvf \/tmp\/splunk-add-on-for-effective-configuration_101.tgz -C \/opt\/splunk\/etc\/deployment-apps<\/code><\/p>\n\n\n\n<p>Then you have to add it to a serverclass to deploy it on agents. Please check the \u201c<em>Restart agent<\/em>\u201d toggle button.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Usage<\/h3>\n\n\n\n<p>As soon as it is deployed and the UF restarted, you can go to Settings\/Agent Management on your <strong>Agent Management server<\/strong> (formerly called Deployment Server)<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"881\" height=\"974\" src=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image.png\" alt=\"\" class=\"wp-image-558\" style=\"width:620px;height:auto\" srcset=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image.png 881w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-271x300.png 271w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-768x849.png 768w\" sizes=\"(max-width: 881px) 100vw, 881px\" \/><\/figure>\n\n\n\n<p>You will see your <strong>Agent Management<\/strong> page with your <em>Forwarders<\/em>, Applications and Server Classes.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"945\" height=\"357\" src=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-1.png\" alt=\"\" class=\"wp-image-559\" style=\"width:683px;height:auto\" srcset=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-1.png 945w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-1-300x113.png 300w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-1-768x290.png 768w\" sizes=\"(max-width: 945px) 100vw, 945px\" \/><\/figure>\n\n\n\n<p>You can click on a specific forwarder (Client Name column link) and you will have details about your forwarder. You will also see 3 tabs. The first one are the Details, the second one is the Applications installed on it, and the 3<sup>rd<\/sup> one is the Effective Configuration of that forwarder, collected by the Effective configuration Add-On we installed before.<\/p>\n\n\n\n<p><strong>Details Tab:<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"945\" height=\"443\" src=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-2.png\" alt=\"\" class=\"wp-image-560\" srcset=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-2.png 945w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-2-300x141.png 300w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-2-768x360.png 768w\" sizes=\"(max-width: 945px) 100vw, 945px\" \/><\/figure>\n\n\n\n<p><strong>Applications Tab:<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"945\" height=\"416\" src=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-3.png\" alt=\"\" class=\"wp-image-561\" srcset=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-3.png 945w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-3-300x132.png 300w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-3-768x338.png 768w\" sizes=\"(max-width: 945px) 100vw, 945px\" \/><\/figure>\n\n\n\n<p><strong>Effective Configuration Tab:<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"945\" height=\"655\" src=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-4.png\" alt=\"\" class=\"wp-image-562\" srcset=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-4.png 945w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-4-300x208.png 300w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-4-768x532.png 768w\" sizes=\"(max-width: 945px) 100vw, 945px\" \/><\/figure>\n\n\n\n<p>You can notice that you have 4 buttons :<\/p>\n\n\n\n<ul>\n<li>Inputs<\/li>\n\n\n\n<li>Outputs<\/li>\n\n\n\n<li>Deployment Client<\/li>\n\n\n\n<li>Server<\/li>\n<\/ul>\n\n\n\n<p>and a field you can type in for searching specific elements.<\/p>\n\n\n\n<p>By default, the \u201c<em>Show default values<\/em>\u201d is not toggled, showing only the non-default configuration. If you toggle it, the default values will appear but in grey, that allows you to easily see the difference between default and non-default values:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"945\" height=\"687\" src=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-5.png\" alt=\"\" class=\"wp-image-563\" srcset=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-5.png 945w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-5-300x218.png 300w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-5-768x558.png 768w\" sizes=\"(max-width: 945px) 100vw, 945px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"945\" height=\"356\" src=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-6.png\" alt=\"\" class=\"wp-image-564\" srcset=\"https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-6.png 945w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-6-300x113.png 300w, https:\/\/www.octamis.com\/octamis-blog\/wp-content\/uploads\/2025\/11\/image-6-768x289.png 768w\" sizes=\"(max-width: 945px) 100vw, 945px\" \/><\/figure>\n\n\n\n<p>You can download the effective configuration of the forwarder by clicking the big blue button at the top right. It will create a .zip file that will be downloaded through your browser.<\/p>\n\n\n\n<p>This .zip file contains 4 files: <code>inputs.conf<\/code>,<code> outputs.conf<\/code>, <code>deploymentclient.conf<\/code> and <code>server.conf<\/code><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p>This addon is very interesting for Splunk admins. I met several clients that have forwarders on their infrastructure but no access to them except through the Splunk Agent Management Server (aka Deployment Server), and getting the Effective Configuration for these forwarders can sometimes be difficult as they are managed by other business entities. Having that feature can be a great improvement for them, or even for Splunk support or Splunk Professional Services.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Effective Configuration Add-On saves time and eliminates the need to contact other teams if you&#8217;re not managing all Splunk elements, helping you access the information you need in seconds instead of days. Using the Effective Configuration Add-On also allows you to view the current effective configuration on selected agents and check parameter&#8217;s values set [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":568,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[36,10,34],"_links":{"self":[{"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/posts\/557"}],"collection":[{"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/comments?post=557"}],"version-history":[{"count":9,"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/posts\/557\/revisions"}],"predecessor-version":[{"id":579,"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/posts\/557\/revisions\/579"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/media\/568"}],"wp:attachment":[{"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/media?parent=557"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/categories?post=557"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.octamis.com\/octamis-blog\/wp-json\/wp\/v2\/tags?post=557"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}