Configuration Browser

Search and inspect Splunk configuration files and stanzas across all enrolled nodes

Configuration Browser

The Configuration Browser lets you search and inspect Splunk .conf files and their stanzas across every enrolled node in your fleet — all from a single interface.


How It Works

Navigate to Automation PlatformConfigs to open the Configuration Browser.

Select a Host

Use the host dropdown to choose which enrolled node's configurations to browse. The dropdown shows each host's hostname and Splunk version.

Browse Files and Apps

Once you select a host, the browser loads all configuration files organized by Splunk app. You can:

  • Filter by app — choose a specific Splunk app to narrow the file list
  • Filter by file — select a specific .conf file (e.g., inputs.conf, props.conf)
  • Search — free-text search across section names, options, and values

Configuration Table

The table displays configuration items at the stanza level:

ColumnDescription
FileThe .conf file path
SectionThe stanza name (e.g., [monitor:///var/log/syslog])
OptionThe configuration key
ValueThe configuration value

View Raw Config

Click any configuration file to view its full contents in a read-only dialog. Use the Copy button to copy the raw config text.

Use Cases

  • Audit configurations — verify that a specific stanza exists on all expected hosts
  • Troubleshoot parsing — inspect props.conf and transforms.conf to debug field extractions
  • Compare hosts — switch between hosts to compare their configurations side by side
  • Pre-change review — check current state before creating a change plan