When creating a deployment app in Splunk, the minimum required files depend on what the app is designed to do. However, props.conf is not a required file unless the app specifically needs it for data parsing or transformation.
Required Components:
app.conf (in default or local):
This file is necessary to define the app's metadata, such as its name, version, and visibility.
It resides in the default or local directory.
metadata folder:
Contains local.meta or default.meta, which define permissions and sharing settings for the app's knowledge objects.
Other configuration files (e.g., inputs.conf, transforms.conf):
These are included only if needed for specific functionality like data input or transformation.
Why Not Props.conf?
props.conf is only required if the app needs to perform data parsing, field extractions, or transformations.
If the app does not involve any parsing or indexing-time configurations, then props.conf is unnecessary.
Thus, D. props.conf is not a required component of a deployment app unless specific parsing logic is needed.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
cagdaskarabag
2 weeks, 1 day agoA10D21
4 weeks ago