Skip to content

splunk inputs configuration precedence - #117

Merged
omrozowicz-splunk merged 48 commits into
mainfrom
splunk-inputs-precedence-observer
Aug 31, 2026
Merged

splunk inputs configuration precedence#117
omrozowicz-splunk merged 48 commits into
mainfrom
splunk-inputs-precedence-observer

Conversation

@omrozowicz-splunk

@omrozowicz-splunk omrozowicz-splunk commented Aug 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Add Splunk btool config precedence for splunk_inputs

  • splunk_inputs now auto-discovers all splunk_ta_* apps under $SPLUNK_HOME/etc/apps and applies standard Splunk config
    precedence: etc/system/default → TA default/ → TA local/ → etc/system/local
  • base_dir config field (or $SPLUNK_HOME env var) is now the Splunk installation root
  • inputs.conf params are merged per-key across layers — later layers only override keys they explicitly set
  • Unsupported input/output stanza kinds are skipped with an info log instead of returning an error
  • DiscoverTAs moved to tabuilder as the single source of truth for finding TA directories

@omrozowicz-splunk
add precedence of configuration for splunk_outputs
cb6f4ff
@omrozowicz-splunk
add precedence of configuration for splunk_inputs
15f9135
@omrozowicz-splunk
simplify, use the same filesystem for both inputs and outputs
07dcb0c
@omrozowicz-splunk
simplify hasScheme function
26fd340
@omrozowicz-splunk
draft of splunk_ta_observer
cecd7c1
@omrozowicz-splunk
draft of splunk_ta_observer
097c781
@omrozowicz-splunk
add watch observer under splunk inputs
cee0ee3
@omrozowicz-splunk
commit folderobserver
da9a3a1
@omrozowicz-splunk
add logs
8958f8d
@omrozowicz-splunk
Merge remote-tracking branch 'origin/main' into splunk-inputs-precede…
0c8f5f9 
…nce-observer

# Conflicts:
#	internal/conf/outputs.go
#	internal/tabuilder/tabuilder.go
#	internal/tabuilder/tabuilder_test.go
#	pkg/splunkinputsreceiver/go.mod
#	pkg/splunkinputsreceiver/go.sum
#	pkg/splunkinputsreceiver/receiver.go
@omrozowicz-splunk
add tests
dafa021
@omrozowicz-splunk
delete stale code
bd18256
@omrozowicz-splunk
fix missing import
42d130f
@omrozowicz-splunk
fix problems after merge
f84c499
@omrozowicz-splunk
add logging
32f51f6
@omrozowicz-splunk
change paths
bf0a4aa
@omrozowicz-splunk
change receiver and subreceiver structure
36c2205
@omrozowicz-splunk
delete old testdata, change check for unsupported stanzas
ec69387
@omrozowicz-splunk
add check for the directory if it is a TA
e336161
@omrozowicz-splunk
add check for the directory if it is a TA
1d258ea
@omrozowicz-splunk
add check for the directory if it is a TA
156f584
@omrozowicz-splunk
add check for script permissions
723e8a3
@omrozowicz-splunk
bring back functions refactor
3e078c2
@omrozowicz-splunk
delete excessive logging
02d1e0d
@omrozowicz-splunk
change script path determining logic
237cf67
@omrozowicz-splunk
add function for checking if stanza is disabled
da4618c
@omrozowicz-splunk
delete local folder observer
f92ad38
@omrozowicz-splunk
delete baseDir parameter
37f777c
@omrozowicz-splunk
fix tests
4f7791d
@omrozowicz-splunk
bring back baseDir version
352e67c
@omrozowicz-splunk omrozowicz-splunk changed the title splunk inputs configuration precedence " folder observer splunk inputs configuration precedence Aug 26, 2026
@omrozowicz-splunk
omrozowicz-splunk marked this pull request as ready for review August 26, 2026 10:32
dhruvanshus-crest
dhruvanshus-crest reviewed Aug 27, 2026
View reviewed changes
Comment thread internal/conf/inputs_test.go
Comment thread internal/conf/stanza.go Outdated
Comment thread internal/tabuilder/tabuilder.go
Comment thread pkg/splunkinputsreceiver/subreceiver.go
dhruvanshus-crest
dhruvanshus-crest reviewed Aug 27, 2026
View reviewed changes
Comment thread pkg/splunkoutputsexporter/subexporter.go Outdated
@omrozowicz-splunk
omrozowicz-splunk merged commit 6d02c28 into main Aug 31, 2026
9 checks passed
@omrozowicz-splunk
omrozowicz-splunk deleted the splunk-inputs-precedence-observer branch August 31, 2026 05:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@atoulme atoulme atoulme approved these changes
@dhruvanshus-crest dhruvanshus-crest dhruvanshus-crest approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@omrozowicz-splunk @atoulme @dhruvanshus-crest