Current Path :
/
opt
/
splunkforwarder
/
etc
/
system
/
default
/
Or
Select Your Path :
Upload File :
New :
File
Dir
//opt/splunkforwarder/etc/system/default/web.conf
[default] [settings] startwebserver = 1 httpport = 8000 enableSplunkWebSSL = false mgmtHostPort = localhost:8089 appServerPorts = 8065 splunkdConnectionTimeout = 30 enableSplunkWebClientNetloc = False allowedSplunkWebClientNetlocList = allowedSplunkWebClientSchemeList = privKeyPath = $SPLUNK_HOME/etc/auth/splunkweb/privkey.pem serverCert = $SPLUNK_HOME/etc/auth/splunkweb/cert.pem sslVersions = tls1.2 cipherSuite = ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256 ecdhCurves = prime256v1, secp384r1, secp521r1 userRegistrationURL = https://www.splunk.com/page/sign_up updateCheckerBaseURL = https://quickdraw.splunk.com/js/ docsCheckerBaseURL = https://quickdraw.splunk.com/help showProductMenu = False productMenuLabel = My Splunk showUserMenuProfile = False productMenuUriPrefix = https://splunkcommunities.force.com x_frame_options_sameorigin = True remoteUser = REMOTE_USER remoteUserMatchExact = 0 remoteGroupsMatchExact = 0 remoteGroupsQuoted = False SSOMode = strict allowSsoWithoutChangingServerConf = 0 certBasedUserAuthPivOidList = 1.3.6.1.4.1.311.20.2.3, Microsoft Universal Principal Name, Microsoft User Principal Name root_endpoint = / static_endpoint = /static static_dir = share/splunk/search_mrsparkle/exposed rss_endpoint = /rss embed_uri = embed_footer = splunk> template_dir = share/splunk/search_mrsparkle/templates module_dir = share/splunk/search_mrsparkle/modules enable_gzip = True use_future_expires = True flash_major_version = 9 flash_minor_version = 0 flash_revision_version = 124 enable_proxy_write = True js_logger_mode = None js_logger_mode_server_end_point = util/log/js js_logger_mode_server_poll_buffer = 1000 js_logger_mode_server_max_buffer = 100 ui_inactivity_timeout = 60 enable_insecure_login = False enable_secure_entity_move = True enable_insecure_pdfgen = False simple_error_page = False cacheBytesLimit = 4194304 cacheEntriesLimit = 16384 staticCompressionLevel = 9 enable_autocomplete_login = False verifyCookiesWorkDuringLogin = True login_content = enabled_decomposers = plot minify_js = True minify_css = True trap_module_exceptions = True enable_pivot_adhoc_acceleration = True pivot_adhoc_acceleration_mode = Elastic jschart_test_mode = False jschart_truncation_limit.chrome = 50000 jschart_truncation_limit.firefox = 50000 jschart_truncation_limit.safari = 50000 jschart_truncation_limit.ie11 = 50000 jschart_series_limit = 100 jschart_results_limit = 10000 choropleth_shape_limit = 10000 dashboard_html_allow_inline_styles = true dashboard_html_allow_iframes = true dashboard_html_allow_embeddable_content = false dashboard_html_wrap_embed = true max_view_cache_size = 1000 pdfgen_is_available = 1 server.thread_pool = 50 listenOnIPv6 = no log.access_file = web_access.log log.access_maxsize = 25000000 log.access_maxfiles = 5 log.error_maxsize = 25000000 log.error_maxfiles = 5 log.screen = True request.show_tracebacks = True engine.autoreload.on = False tools.sessions.on = True tools.sessions.timeout = 60 tools.sessions.restart_persist = True tools.sessions.httponly = True tools.sessions.secure = True tools.sessions.forceSecure = False response.timeout = 7200 tools.sessions.storage_type = file tools.sessions.storage_path = var/run/splunk/sessions tools.decode.on = True tools.encode.on = True tools.encode.encoding = utf-8 tools.encode.text_only = False override_JSON_MIME_type_with_text_plain = True job_default_auto_cancel = 62 job_min_polling_interval = 100 job_max_polling_interval = 1000 acceptFrom = * maxThreads = 0 maxSockets = 0 dedicatedIoThreads = 0 keepAliveIdleTimeout = 7200 busyKeepAliveIdleTimeout = 12 forceHttp10 = auto crossOriginSharingPolicy = crossOriginSharingHeaders = allowSslCompression = false allowSslRenegotiation = true sendStrictTransportSecurityHeader = false includeSubDomains = false preload = false enableWebDebug = False allowableTemplatePaths = enable_risky_command_check = true enable_risky_command_check_dashboard = true enableSearchJobXslt = false loginCustomLogo = customFavicon = loginBackgroundImageOption = default loginCustomBackgroundImage = loginFooterOption = default loginFooterText = loginDocumentTitleOption = default loginDocumentTitleText = firstTimeLoginMessageOption = default firstTimeLoginMessage = loginPasswordHint = appNavReportsLimit = 500 appServerProcessLogStderr = false simplexml_dashboard_create_version = 1.1 allow_insecure_libraries_toggle = true show_app_context = true cookieSameSite = not_specified [remoteUI] optInRemoteUI = false allowExternalRemote = false [smc] [expose:admin_alerts] methods = GET,DELETE pattern = admin/alerts [expose:admin_duo_mfa-duo_mfa] methods = GET pattern = admin/Duo-MFA/duo-mfa [expose:admin_rsa_mfa-rsa-mfa] methods = GET pattern = admin/Rsa-MFA/rsa-mfa [expose:admin_alerts_ELEMENT] methods = GET,DELETE pattern = admin/alerts/* [expose:admin_conf-reports] methods = POST,GET,DELETE pattern = admin/conf-reports [expose:admin_conf-impersonation] methods = POST,GET pattern = admin/conf-impersonation [expose:admin_conf-impersonation_ELEMENT] methods = POST,GET,DELETE pattern = admin/conf-impersonation/* [expose:admin_distsearch-group] methods = POST,GET pattern = admin/distsearch-group [expose:admin_distsearch-group_ELEMENT] methods = GET,POST,DELETE pattern = admin/distsearch-group/* [expose:admin_saml_idp_metadata] methods = GET,POST pattern = admin/SAML-idp-metadata [expose:admin_saml_idp_metadata_ELEMENT] methods = GET,POST pattern = admin/SAML-idp-metadata/* [expose:admin_saml_groups] methods = GET,POST,DELETE pattern = admin/SAML-groups [expose:admin_saml_groups_ELEMENT] methods = GET,POST,DELETE pattern = admin/SAML-groups/* [expose:authentication_providers_ldap] methods = GET,DELETE,POST pattern = authentication/providers/LDAP [expose:authentication_providers_ldap_ELEMENT] methods = GET,DELETE,POST pattern = authentication/providers/LDAP/* [expose:authentication_providers_ldap_ELEMENT_enable] methods = GET,DELETE,POST pattern = authentication/providers/LDAP/*/enable [expose:authentication_providers_ldap_ELEMENT_disable] methods = GET,DELETE,POST pattern = authentication/providers/LDAP/*/disable [expose:admin_LDAP-groups] methods = GET,DELETE,POST pattern = admin/LDAP-groups [expose:admin_LDAP-groups_ELEMENT] methods = GET,DELETE,POST pattern = admin/LDAP-groups/* [expose:admin_telemetry] methods = GET,POST,DELETE pattern = admin/telemetry [expose:admin_telemetry_ELEMENT] methods = GET,POST,DELETE pattern = admin/telemetry/* [expose:admin_win-alleventlogs] pattern = admin/win-alleventlogs [expose:admin_win-alleventlogs_ELEMENT] pattern = admin/win-alleventlogs/* [expose:admin_win-perfmon] pattern = admin/win-perfmon [expose:admin_win-perfmon_ELEMENT] pattern = admin/win-perfmon/* [expose:admin_win-perfmon-find-collection] pattern = admin/win-perfmon-find-collection [expose:admin_win-perfmon-find-collection_ELEMENT] pattern = admin/win-perfmon-find-collection/* [expose:admin_win-perfmon-find-collection_ELEMENT_ELEMENT] pattern = admin/win-perfmon-find-collection/*/* [expose:admin_win-enum-eventlogs] pattern = admin/win-wmi-enum-eventlogs [expose:admin_win-enum-eventlogs_ELEMENT] pattern = admin/win-wmi-enum-eventlogs/* [expose:admin_win-wmi-find-collection] pattern = admin/win-wmi-find-collection [expose:admin_win-wmi-find-collection_ELEMENT] pattern = admin/win-wmi-find-collection/* [expose:admin_file-explorer] pattern = admin/file-explorer [expose:admin_file-explorer_ELEMENT] pattern = admin/file-explorer/* [expose:admin_directory] pattern = admin/directory [expose:admin_win-reg-explorer] pattern = admin/win-reg-explorer [expose:admin_win-reg-explorer_ELEMENT] pattern = admin/win-reg-explorer/* [expose:admin_win-ad-explorer] pattern = admin/win-ad-explorer [expose:admin_win-ad-explorer_ELEMENT] pattern = admin/win-ad-explorer/* [expose:admin_summarization] methods = POST,GET,DELETE pattern = admin/summarization [expose:admin_summarization_ELEMENT] methods = GET,POST,DELETE pattern = admin/summarization/* [expose:admin_summarization_ELEMENT_details] pattern = admin/summarization/*/details [expose:admin_users] methods = GET,DELETE pattern = admin/users [expose:admin_users_ELEMENT] methods = GET,DELETE pattern = admin/users/* [expose:alerts_fired_alerts] pattern = alerts/fired_alerts [expose:alerts_fired_alerts_ELEMENT] methods = GET,DELETE pattern = alerts/fired_alerts/* [expose:apps_appinstall] methods = POST pattern = apps/appinstall [expose:apps_apptemplates] pattern = apps/apptemplates [expose:apps_apptemplates_ELEMENT] pattern = apps/apptemplates/* [expose:apps_remote] methods = GET,POST pattern = apps/remote [expose:apps_remote_ELEMENT] methods = GET,POST pattern = apps/remote/* [expose:apps_remote_ELEMENT_ELEMENT] methods = GET,POST pattern = apps/remote/*/* [expose:apps] methods = GET,POST pattern = apps/local [expose:apps_ELEMENT] methods = GET,POST,DELETE pattern = apps/local/* [expose:apps_ELEMENT_disable] methods = POST pattern = apps/local/*/disable [expose:apps_ELEMENT_enable] methods = POST pattern = apps/local/*/enable [expose:apps_ELEMENT_acl] methods = POST pattern = apps/local/*/acl [expose:apps_ELEMENT_reload] methods = GET,POST pattern = apps/local/*/_reload [expose:apps_ELEMENT_dependencies] methods = GET pattern = apps/local/*/dependencies [expose:auth_login] methods = POST pattern = auth/login skipCSRFProtection = 1 [expose:authentication_auth-tokens] methods = POST,GET pattern = authentication/auth-tokens [expose:authentication_current-context] pattern = authentication/current-context [expose:authentication_current-context_ELEMENT] pattern = authentication/current-context/* [expose:authentication_providers_saml] methods = GET,DELETE,POST pattern = authentication/providers/SAML [expose:authentication_providers_saml_ELEMENT] methods = GET,DELETE,POST pattern = authentication/providers/SAML/* [expose:authentication_providers_services_active_authmodule] methods = GET pattern = authentication/providers/services/active_authmodule [expose:authentication_httpauth-tokens] pattern = authentication/httpauth-tokens [expose:authentication_httpauth-tokens_ELEMENT] methods = GET,DELETE pattern = authentication/httpauth-tokens/* [expose:admin_duo_mfa] methods = GET pattern = admin/Duo-MFA [expose:authentication_users] methods = POST,GET pattern = authentication/users [expose:authentication_users_ELEMENT] methods = GET,DELETE,POST pattern = authentication/users/* [expose:authorization_grantable_capabilities] pattern = authorization/grantable_capabilities [expose:authorization_capabilities] pattern = authorization/capabilities [expose:authorization_capabilities_ELEMENT_] pattern = authorization/capabilities/*/ [expose:authorization_roles] methods = POST,GET pattern = authorization/roles [expose:authorization_roles_ELEMENT] methods = GET,DELETE,POST pattern = authorization/roles/* [expose:authorization_fieldfilters] methods = POST,GET pattern = authorization/fieldfilters [expose:authorization_fieldfilters_ELEMENT] methods = GET,DELETE,POST pattern = authorization/fieldfilters/* [expose:cluster_config] pattern = cluster/config [expose:cluster_master_status] methods = GET,POST pattern = cluster/master/status [expose:workloads_status] methods = GET pattern = workloads/status [expose:workloads_config_preflight_checks] methods = GET pattern = workloads/config/preflight-checks [expose:workloads_config_enable] methods = POST pattern = workloads/config/enable [expose:workloads_config_disable] methods = POST pattern = workloads/config/disable [expose:workloads_pools] methods = GET,POST pattern = workloads/pools [expose:workloads_pools_ELEMENT] methods = GET,POST,DELETE pattern = workloads/pools/* [expose:workloads_categories] methods = GET,POST pattern = workloads/categories [expose:workloads_categories_ELEMENT] methods = GET,POST,DELETE pattern = workloads/categories/* [expose:workloads_rules] methods = GET,POST pattern = workloads/rules [expose:workloads_rules_ELEMENT] methods = GET,POST,DELETE pattern = workloads/rules/* [expose:workloads_rules_ELEMENT_enable] methods = POST pattern = workloads/rules/*/enable [expose:workloads_rules_ELEMENT_disable] methods = POST pattern = workloads/rules/*/disable [expose:workloads_policy_search_admission_control] methods = POST pattern = workloads/policy/search_admission_control [expose:workloads_policy] methods = GET pattern = workloads/policy [expose:workloads_policy_ELEMENT] methods = GET,POST pattern = workloads/policy/* [expose:shcluster_config] pattern = shcluster/config [expose:shcluster_config_config] methods = GET,POST pattern = shcluster/config/* [expose:shcluster_members] methods = GET,POST pattern = shcluster/member/members [expose:shcluster_restart] methods = POST pattern = shcluster/captain/control/control/restart [expose:shcluster_captain_transfer] methods = POST pattern = shcluster/member/consensus/*/transfer_captaincy [expose:shcluster_status] methods = GET pattern = shcluster/status [expose:cluster_master_buckets_ELEMENT] methods = GET pattern = cluster/master/buckets/* [expose:cluster_master_buckets_ELEMENT_remove_all] methods = POST pattern = cluster/master/buckets/*/remove_all [expose:cluster_master_buckets_ELEMENT_remove_from_peer] methods = POST pattern = cluster/master/buckets/*/remove_from_peer [expose:cluster_master_control_control_roll_hot_buckets] methods = POST pattern = cluster/master/control/control/roll-hot-buckets [expose:cluster_master_control_control_resync_bucket_from_peer] methods = POST pattern = cluster/master/control/control/resync_bucket_from_peer [expose:cluster_master_control_control_restart] methods = POST, GET pattern = cluster/master/control/control/restart [expose:cluster_config_ELEMENT] methods = GET,POST pattern = cluster/config/* [expose:cluster_master_ELEMENT] methods = GET,POST pattern = cluster/master/* [expose:cluster_master_ELEMENT_ELEMENT] methods = GET,POST pattern = cluster/master/*/* [expose:cluster_master_control_default_apply] methods = GET,POST pattern = cluster/master/control/default/apply [expose:cluster_master_control_control_prune_index] methods = POST pattern = cluster/master/control/control/prune_index [expose:cluster_master_control_validate] methods = POST pattern = cluster/master/control/control/validate_bundle [expose:cluster_master_control_rollback] methods = POST pattern = cluster/master/control/control/rollback [expose:cluster_slave_ELEMENT] methods = GET,POST pattern = cluster/slave/* [expose:cluster_slave_info_ELEMENT] methods = GET,POST pattern = cluster/slave/info/* [expose:cluster_searchhead_ELEMENT] methods = GET,POST pattern = cluster/searchhead/* [expose:cluster_searchhead_generation_ELEMENT] methods = GET,POST pattern = cluster/searchhead/generation/* [expose:cluster_searchhead_searchheadconfig_ELEMENT] methods = GET,POST,DELETE pattern = cluster/searchhead/searchheadconfig/* [expose:cluster_manager] methods = GET,POST pattern = cluster/manager/**/* [expose:configs_conf-VALUE] methods = GET,POST pattern = configs/conf-* [expose:configs_conf-VALUE_ELEMENT] methods = GET,POST,DELETE pattern = configs/conf-*/* [expose:configs_conf-VALUE_ELEMENT_acl] methods = GET,POST pattern = configs/conf-*/*/acl [expose:configs_conf-VALUE_ELEMENT_disable] methods = POST pattern = configs/conf-*/*/disable [expose:configs_conf-VALUE_ELEMENT_enable] methods = POST pattern = configs/conf-*/*/enable [expose:configs_spec] methods = GET,POST pattern = configs/spec [expose:configs_validation] methods = POST pattern = configs/validation [expose:data_commands] pattern = data/commands [expose:data_commands_ELEMENT] pattern = data/commands/* [expose:data_commands_ELEMENT_acl] methods = POST pattern = data/commands/*/acl [expose:data_indexes] methods = POST,GET pattern = data/indexes [expose:data_indexes_ELEMENT] methods = GET,POST,DELETE pattern = data/indexes/* [expose:data_indexes_ELEMENT_disable] methods = POST pattern = data/indexes/*/disable [expose:data_indexes_ELEMENT_enable] methods = POST pattern = data/indexes/*/enable [expose:data_indexes-extended] methods = GET pattern = data/indexes-extended [expose:data_ingest_event_capture] methods = POST pattern = data/ingest/event-capture [expose:data_ingest_rfs_destinations] methods = GET,POST pattern = data/ingest/rfsdestinations [expose:data_ingest_rfs_destinations_ELEMENT] methods = GET,POST,DELETE pattern = data/ingest/rfsdestinations/* [expose:data_ingest_rfs_destinations_ELEMENT_test] methods = POST pattern = data/ingest/rfsdestinations/*/test [expose:data_ingest_rulesets] methods = GET,POST pattern = data/ingest/rulesets [expose:data_ingest_rulesets_ELEMENT] methods = GET,POST,DELETE pattern = data/ingest/rulesets/* [expose:data_ingest_rulesets_deployment] methods = GET pattern = data/ingest/ruleset-deployment [expose:data_ingest_rulesets_status] methods = GET pattern = data/ingest/ruleset-status [expose:data_ingest_ruleset_serialize] methods = POST pattern = data/ingest/ruleset-serialize [expose:data_distributed-indexes] methods = GET pattern = data/distributed-indexes [expose:data_inputs] methods = GET pattern = data/inputs [expose:data_inputs_ad] methods = POST,GET pattern = data/inputs/ad [expose:data_inputs_ad_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/ad/* [expose:data_inputs_token_http] methods = POST,GET pattern = data/inputs/http [expose:data_inputs_token_http_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/http/* [expose:data_inputs_token_http_ELEMENT_ELEMENT] methods = POST,GET pattern = data/inputs/http/*/* [expose:data_inputs_monitor] methods = POST,GET pattern = data/inputs/monitor [expose:data_inputs_monitor_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/monitor/* [expose:data_inputs_monitor_ELEMENT_members] pattern = data/inputs/monitor/*/members [expose:data_inputs_oneshot] methods = POST,GET pattern = data/inputs/oneshot [expose:data_inputs_oneshot_ELEMENT] pattern = data/inputs/oneshot/* [expose:data_inputs_registry] methods = POST,GET pattern = data/inputs/registry [expose:data_inputs_registry_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/registry/* [expose:data_inputs_script] methods = POST,GET pattern = data/inputs/script [expose:data_inputs_script_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/script/* [expose:data_inputs_script_restart] methods = POST pattern = data/inputs/script/restart [expose:data_inputs_tcp_cooked] methods = POST,GET pattern = data/inputs/tcp/cooked [expose:data_inputs_tcp_cooked_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/tcp/cooked/* [expose:data_inputs_tcp_cooked_ELEMENT_connections] pattern = data/inputs/tcp/cooked/*/connections [expose:data_inputs_tcp_raw] methods = POST,GET pattern = data/inputs/tcp/raw [expose:data_inputs_tcp_raw_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/tcp/raw/* [expose:data_inputs_tcp_raw_ELEMENT_connections] pattern = data/inputs/tcp/raw/*/connections [expose:data_inputs_tcp_ssl] pattern = data/inputs/tcp/ssl [expose:data_inputs_tcp_ssl_ELEMENT] methods = GET,POST pattern = data/inputs/tcp/ssl/* [expose:data_inputs_udp] methods = POST,GET pattern = data/inputs/udp [expose:data_inputs_udp_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/udp/* [expose:data_inputs_udp_ELEMENT_connections] pattern = data/inputs/udp/*/connections [expose:data_inputs_win-event-log-collections] methods = POST,GET pattern = data/inputs/win-event-log-collections [expose:data_inputs_win-event-log-collections_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/win-event-log-collections/* [expose:data_inputs_winhostmon] methods = POST,GET pattern = data/inputs/WinHostMon [expose:data_inputs_winhostmon_ELEMENT] methods = POST,GET pattern = data/inputs/WinHostMon/* [expose:data_inputs_winnetmon] methods = POST,GET pattern = data/inputs/WinNetMon [expose:data_inputs_winnetmon_ELEMENT] methods = POST,GET pattern = data/inputs/WinNetMon/* [expose:data_inputs_win-perfmon] methods = POST,GET pattern = data/inputs/win-perfmon [expose:data_inputs_win-perfmon_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/win-perfmon/* [expose:data_inputs_winprintmon] methods = POST,GET pattern = data/inputs/WinPrintMon [expose:data_inputs_winprintmon_ELEMENT] methods = POST,GET pattern = data/inputs/WinPrintMon/* [expose:data_inputs_win-wmi-collections] methods = POST,GET pattern = data/inputs/win-wmi-collections [expose:data_inputs_win-wmi-collections_ELEMENT] methods = GET,DELETE,POST pattern = data/inputs/win-wmi-collections/* [expose:data_lookup-table-files] methods = POST,GET pattern = data/lookup-table-files [expose:data_lookup-table-files_ELEMENT] methods = GET,DELETE,POST pattern = data/lookup-table-files/* [expose:data_lookup-table-files_ELEMENT_acl] methods = POST pattern = data/lookup-table-files/*/acl [expose:data_modular-inputs] methods = POST,GET pattern = data/modular-inputs [expose:data_modular-inputs_ELEMENT] methods = GET,POST pattern = data/modular-inputs/* [expose:data_outputs_tcp_default] methods = POST,GET pattern = data/outputs/tcp/default [expose:data_outputs_tcp_default_ELEMENT] methods = GET,DELETE,POST pattern = data/outputs/tcp/default/* [expose:data_outputs_tcp_group] methods = POST,GET pattern = data/outputs/tcp/group [expose:data_outputs_tcp_group_ELEMENT] methods = GET,DELETE,POST pattern = data/outputs/tcp/group/* [expose:data_outputs_tcp_server] methods = POST,GET pattern = data/outputs/tcp/server [expose:data_outputs_tcp_server_ELEMENT] methods = GET,DELETE,POST pattern = data/outputs/tcp/server/* [expose:data_outputs_tcp_server_ELEMENT_allconnections] pattern = data/outputs/tcp/server/*/allconnections [expose:data_outputs_tcp_syslog] methods = POST,GET pattern = data/outputs/tcp/syslog [expose:data_outputs_tcp_syslog_ELEMENT] methods = GET,DELETE,POST pattern = data/outputs/tcp/syslog/* [expose:data_props_extractions] methods = POST,GET pattern = data/props/extractions [expose:data_props_extractions_ELEMENT] methods = GET,DELETE,POST pattern = data/props/extractions/* [expose:data_props_extractions_ELEMENT_acl] methods = POST pattern = data/props/extractions/*/acl [expose:data_props_fieldaliases] methods = POST,GET pattern = data/props/fieldaliases [expose:data_props_fieldaliases_ELEMENT] methods = GET,DELETE,POST pattern = data/props/fieldaliases/* [expose:data_props_fieldaliases_ELEMENT_acl] methods = POST pattern = data/props/fieldaliases/*/acl [expose:data_props_lookups] methods = POST,GET pattern = data/props/lookups [expose:data_props_lookups_ELEMENT] methods = GET,DELETE,POST pattern = data/props/lookups/* [expose:data_props_lookups_ELEMENT_acl] methods = POST pattern = data/props/lookups/*/acl [expose:data_props_sourcetype-rename] methods = POST,GET pattern = data/props/sourcetype-rename [expose:data_props_sourcetype-rename_ELEMENT] methods = GET,DELETE,POST pattern = data/props/sourcetype-rename/* [expose:data_props_sourcetype-rename_ELEMENT_ACL] methods = POST pattern = data/props/sourcetype-rename/*/acl [expose:data_transforms_extractions] methods = POST,GET pattern = data/transforms/extractions [expose:data_transforms_extractions_ELEMENT] methods = GET,DELETE,POST pattern = data/transforms/extractions/* [expose:data_transforms_extractions_ELEMENT_ELEMENT] methods = POST pattern = data/transforms/extractions/*/* [expose:data_transforms_lookups] methods = POST,GET pattern = data/transforms/lookups [expose:data_transforms_lookups_ELEMENT] methods = GET,DELETE,POST pattern = data/transforms/lookups/* [expose:data_transforms_lookups_ELEMENT_acl] methods = POST pattern = data/transforms/lookups/*/acl [expose:data_metric_transforms_schema] methods = GET,POST pattern = data/transforms/metric-schema [expose:data_metric_transforms_schema_ELEMENT] methods = GET,DELETE,POST pattern = data/transforms/metric-schema/* [expose:data_ui_manager] methods = GET,POST pattern = data/ui/manager [expose:data_ui_manager_ELEMENT] methods = GET,POST pattern = data/ui/manager/* [expose:data_ui_nav] methods = GET,POST pattern = data/ui/nav [expose:data_ui_nav_ELEMENT] methods = GET,POST pattern = data/ui/nav/* [expose:data_ui_nav_ELEMENT_acl] methods = POST pattern = data/ui/nav/*/acl [expose:data_ui_prefs] methods = POST,GET pattern = data/ui/prefs [expose:data_ui_prefs_ELEMENT] methods = POST,GET,DELETE pattern = data/ui/prefs/* [expose:data_ui_times] methods = GET,POST pattern = data/ui/times [expose:data_ui_times_ELEMENT_acl] methods = POST pattern = data/ui/times/*/acl [expose:data_ui_views] methods = GET,POST pattern = data/ui/views [expose:data_ui_views_ELEMENT] methods = GET,POST,DELETE pattern = data/ui/views/* [expose:data_ui_views_ELEMENT_acl] methods = POST pattern = data/ui/views/*/acl [expose:data_ui_views_ELEMENT_history] methods = GET pattern = data/ui/views/*/history [expose:data_ui_views_ELEMENT_revision] methods = GET pattern = data/ui/views/*/revision [expose:data_ui_alerts] methods = GET,POST pattern = data/ui/alerts [expose:data_ui_alerts_ELEMENT] methods = GET,POST,DELETE pattern = data/ui/alerts/* [expose:data_ui_alerts_ELEMENT_acl] methods = POST pattern = data/ui/alerts/*/acl [expose:data_ui_panels] methods = GET,POST pattern = data/ui/panels [expose:data_ui_panels_MOVE] methods = POST pattern = data/ui/panels/*/move [expose:data_ui_panels_ELEMENT] methods = GET,POST,DELETE pattern = data/ui/panels/* [expose:data_ui_panels_ELEMENT_acl] methods = POST pattern = data/ui/panels/*/acl [expose:data_ui_viewstates] methods = GET,POST pattern = data/ui/viewstates [expose:data_ui_viewstates_ELEMENT] methods = GET,POST,DELETE pattern = data/ui/viewstates/* [expose:data_ui_visualizations] methods = GET pattern = data/ui/visualizations [expose:data_ui_visualizations_ELEMENT] methods = GET pattern = data/ui/visualizations/* [expose:data_user-prefs] methods = GET,POST pattern = data/user-prefs [expose:data_user-prefs_ELEMENT] methods = GET,POST,PUT,DELETE pattern = data/user-prefs/* [expose:data_ui_workflow-actions] methods = GET,POST pattern = data/ui/workflow-actions [expose:data_ui_workflow-actions_ELEMENT] methods = GET,POST,DELETE pattern = data/ui/workflow-actions/* [expose:data_ui_workflow-actions_ELEMENT_acl] methods = POST pattern = data/ui/workflow-actions/*/acl [expose:data_ui_global-banner] methods = GET,POST pattern = data/ui/global-banner [expose:data_ui_global-banner_ELEMENT] methods = GET,POST pattern = data/ui/global-banner/* [expose:data_ui_global-banner_ELEMENT_acl] methods = POST pattern = data/ui/global-banner/*/acl [expose:data_vix-providers] methods = GET,POST pattern = data/vix-providers [expose:data_vix-providers_ELEMENT] methods = GET,POST,DELETE pattern = data/vix-providers/* [expose:data_vix-indexes] methods = GET,POST pattern = data/vix-indexes [expose:data_vix-indexes_ELEMENT] methods = GET,POST,DELETE pattern = data/vix-indexes/* [expose:data_vix-indexes_ELEMENT_ELEMENT] methods = GET,POST pattern = data/vix-indexes/*/* [expose:datamodel_model] methods = GET,POST pattern = datamodel/model [expose:datamodel_model_generate] pattern = datamodel/generate [expose:datamodel_model_generate_ELEMENT] pattern = datamodel/generate/* [expose:datamodel_model_ELEMENT] methods = GET,POST,DELETE pattern = datamodel/model/* [expose:datamodel_model_ELEMENT_ELEMENT] methods = POST pattern = datamodel/model/*/* [expose:datamodel_model_ELEMENT_desc] pattern = datamodel/model/*/desc [expose:datamodel_pivot] methods = GET,POST pattern = datamodel/pivot [expose:datamodel_pivot_ELEMENT] pattern = datamodel/pivot/* [expose:data_models_ELEMENT_download] pattern = data/models/*/download [expose:deployment_server_applications] methods = POST,GET,DELETE pattern = deployment/server/applications [expose:deployment_server_applications_ANYTHING] methods = POST,GET,DELETE pattern = deployment/server/applications/** [expose:deployment_server_clients] methods = POST,GET pattern = deployment/server/clients [expose:deployment_server_clients_countClients_by_machineType] pattern = deployment/server/clients/countClients_by_machineType [expose:deployment_server_clients_preview] pattern = deployment/server/clients/preview [expose:deployment_server_clients_ANYTHING.] methods = POST,GET,DELETE pattern = deployment/server/clients/** [expose:deployment_server_config] methods = POST,GET pattern = deployment/server/config [expose:deployment_server_config_ANYTHING] methods = POST,GET pattern = deployment/server/config/** [expose:deployment_server_serverclasses] methods = POST,GET pattern = deployment/server/serverclasses [expose:deployment_server_serverclasses_ANYTHING] methods = POST,GET,DELETE pattern = deployment/server/serverclasses/** [expose:deploymentsetup_app_data_inputs_remote_monitor] methods = POST,GET pattern = deployment/server/setup/data/inputs/remote_monitor [expose:deploymentsetup_app_data_inputs_remote_monitor_ANYTHING] methods = POST,GET pattern = deployment/server/setup/data/inputs/remote_monitor/** [expose:deploymentsetup_app_data_inputs_remote_script] methods = POST,GET pattern = deployment/server/setup/data/inputs/remote_script [expose:deploymentsetup_app_data_inputs_remote_script_ANYTHING] methods = POST,GET pattern = deployment/server/setup/data/inputs/remote_script/** [expose:deploymentsetup_app_data_inputs_tcp_remote_raw] methods = POST,GET pattern = deployment/server/setup/data/inputs/tcp/remote_raw [expose:deploymentsetup_app_data_inputs_tcp_remote_raw_ANYTHING] methods = POST,GET pattern = deployment/server/setup/data/inputs/tcp/remote_raw/** [expose:deploymentsetup_app_data_inputs_remote_udp] methods = POST,GET pattern = deployment/server/setup/data/inputs/remote_udp [expose:deploymentsetup_app_data_inputs_remote_udp_ANYTHING] methods = POST,GET pattern = deployment/server/setup/data/inputs/remote_udp/** [expose:deploymentsetup_app_data_inputs_remote_eventlogs] methods = POST,GET pattern = deployment/server/setup/data/inputs/remote_eventlogs [expose:deploymentsetup_app_data_inputs_remote_eventlogs_ANYTHING] methods = POST,GET pattern = deployment/server/setup/data/inputs/remote_eventlogs/** [expose:deploymentsetup_app_data_inputs_remote_perfmon] methods = POST,GET pattern = deployment/server/setup/data/inputs/remote_perfmon [expose:deploymentsetup_app_data_inputs_remote_perfmon_ANYTHING] methods = POST,GET pattern = deployment/server/setup/data/inputs/remote_perfmon/** [expose:directory] pattern = directory [expose:directory_ELEMENT] pattern = directory/* [expose:web-features] methods = GET, POST pattern = web-features [expose:web-features_ELEMENT] methods = GET, POST pattern = web-features/* [expose:field_extractor_generate_regex] methods = GET,POST pattern = field_extractor/generate_regex [expose:server_health_splunkd] methods = GET pattern = server/health/splunkd [expose:server_health_splunkd_details] methods = GET pattern = server/health/splunkd/details [expose:server_health_deployment] methods = GET pattern = server/health/deployment [expose:server_health_deployment_details] methods = GET pattern = server/health/deployment/details [expose:server_health_config] methods = POST,GET pattern = server/health-config [expose:server_health_config_ELEMENT] methods = POST,GET pattern = server/health-config/* [expose:indexing_preview] methods = GET,POST pattern = indexing/preview [expose:indexing_preview_ELEMENT] methods = GET,POST pattern = indexing/preview/* [expose:licenser_groups] pattern = licenser/groups [expose:licenser_groups_ELEMENT] methods = GET,POST pattern = licenser/groups/* [expose:licenser_licenses] methods = POST,GET pattern = licenser/licenses [expose:licenser_licenses_ELEMENT] methods = GET,POST,DELETE pattern = licenser/licenses/* [expose:licenser_messages] pattern = licenser/messages [expose:licenser_messages_ELEMENT] pattern = licenser/messages/* [expose:licenser_pools] methods = POST,GET pattern = licenser/pools [expose:licenser_pools_ELEMENT] methods = GET,DELETE,POST pattern = licenser/pools/* [expose:licenser_script] methods = POST,GET pattern = licenser/script [expose:licenser_script_ELEMENT] methods = GET,DELETE,POST pattern = licenser/script/* [expose:licenser_slaves] pattern = licenser/slaves [expose:licenser_slaves_ELEMENT] pattern = licenser/slaves/* [expose:licenser_stacks] pattern = licenser/stacks [expose:licenser_stacks_ELEMENT] pattern = licenser/stacks/* [expose:licenser_localslave] methods = GET pattern = licenser/localslave [expose:licenser_localslave_ELEMENT] methods = GET pattern = licenser/localslave/* [expose:licenser_usage] methods = GET pattern = licenser/usage [expose:licenser_usage_ELEMENT] methods = GET pattern = licenser/usage/* [expose:mbtiles_splunk-tiles_ELEMENT_ELEMENT_ELEMENT] pattern = mbtiles/splunk-tiles/*/*/* [expose:mbtiles_splunk-tiles-dark_ELEMENT_ELEMENT_ELEMENT] pattern = mbtiles/splunk-tiles-dark/*/*/* [expose:messages] methods = POST,GET pattern = messages [expose:messages_ELEMENT] methods = GET,DELETE pattern = messages/* [expose:pdfgen_render] methods = GET,POST pattern = pdfgen/render [expose:properties] methods = GET,POST pattern = properties [expose:properties_ELEMENT] methods = GET,POST pattern = properties/* [expose:properties_ELEMENT_ELEMENT] methods = GET,POST pattern = properties/*/* [expose:properties_ELEMENT_ELEMENT_ELEMENT] methods = GET,POST pattern = properties/*/*/* [expose:receivers_simple] methods = POST pattern = receivers/simple [expose:receivers_stream] methods = POST pattern = receivers/stream [expose:saved_bookmarks] methods = POST,GET pattern = saved/bookmarks/monitoring_console [expose:saved_eventtypes] methods = POST,GET pattern = saved/eventtypes [expose:saved_eventtypes_ELEMENT] methods = GET,DELETE,POST pattern = saved/eventtypes/* [expose:saved_eventtypes_ELEMENT_acl] methods = POST pattern = saved/eventtypes/*/acl [expose:saved_fvtags] methods = GET,POST pattern = saved/fvtags [expose:saved_fvtags_ELEMENT] methods = GET,DELETE,POST pattern = saved/fvtags/* [expose:saved_fvtags_ELEMENT_acl] methods = POST pattern = saved/fvtags/*/acl [expose:data_macros] methods = GET,POST pattern = data/macros [expose:data_macros_ELEMENT] methods = GET,DELETE,POST pattern = data/macros/* [expose:data_macros_ELEMENT_acl] methods = POST pattern = data/macros/*/acl [expose:saved_sourcetypes] methods = GET,POST pattern = saved/sourcetypes [expose:saved_sourcetypes_ELEMENT] methods = GET,DELETE,POST pattern = saved/sourcetypes/* [expose:saved_searches] methods = POST,GET pattern = saved/searches [expose:saved_searches_ELEMENT] methods = GET,DELETE,POST pattern = saved/searches/* oidEnabled = 1 [expose:saved_searches_ELEMENT_acknowledge] methods = POST pattern = saved/searches/*/acknowledge [expose:saved_searches_ELEMENT_acl] methods = POST pattern = saved/searches/*/acl [expose:saved_searches_ELEMENT_dispatch] methods = POST pattern = saved/searches/*/dispatch [expose:saved_searches_ELEMENT_embed] methods = POST pattern = saved/searches/*/embed [expose:saved_searches_ELEMENT_history] pattern = saved/searches/*/history oidEnabled = 1 [expose:saved_searches_ELEMENT_scheduled_times] pattern = saved/searches/*/scheduled_times [expose:saved_searches_ELEMENT_suppress] pattern = saved/searches/*/suppress [expose:saved_searches_ELEMENT_unembed] methods = POST pattern = saved/searches/*/unembed [expose:saved_searches_ELEMENT_move] methods = POST pattern = saved/searches/*/move [expose:saved_searches_ELEMENT_disable] methods = POST pattern = saved/searches/*/disable [expose:saved_searches_ELEMENT_enable] methods = POST pattern = saved/searches/*/enable [expose:metric_alerts] methods = POST,GET pattern = alerts/metric_alerts [expose:metric_alerts_ELEMENT] methods = GET,DELETE,POST pattern = alerts/metric_alerts/* oidEnabled = 1 [expose:metric_alerts_ELEMENT_acl] methods = POST pattern = alerts/metric_alerts/*/acl [expose:catalog_metricstore] methods = GET pattern = catalog/metricstore/* [expose:catalog_metricstore_ELEMENT_values] methods = GET pattern = catalog/metricstore/dimensions/*/values oidEnabled = 1 [expose:catalog_metricstore_rollup] methods = GET,POST pattern = catalog/metricstore/rollup [expose:catalog_metricstore_rollup_ELEMENT] methods = GET,POST,DELETE pattern = catalog/metricstore/rollup/* [expose:scheduled_views] pattern = scheduled/views [expose:scheduled_views_ELEMENT] methods = GET,DELETE,POST pattern = scheduled/views/* [expose:scheduled_views_ELEMENT_dispatch] methods = POST pattern = scheduled/views/*/dispatch [expose:scheduled_views_ELEMENT_history] pattern = scheduled/views/*/history [expose:scheduled_views_ELEMENT_scheduled_times] pattern = scheduled/views/*/scheduled_times [expose:search_concurrency-settings] methods = GET pattern = search/concurrency-settings [expose:search_concurrency-settings_search] methods = POST pattern = search/concurrency-settings/search [expose:search_concurrency-settings_scheduler] methods = POST pattern = search/concurrency-settings/scheduler [expose:server_status_limits_search-concurrency] methods = GET pattern = server/status/limits/search-concurrency [expose:search_distributed_config] pattern = search/distributed/config [expose:search_distributed_config_ELEMENT] methods = GET,DELETE,POST pattern = search/distributed/config/* [expose:search_distributed_peers] methods = POST,GET pattern = search/distributed/peers [expose:search_distributed_peers_ELEMENT] methods = GET,DELETE,POST pattern = search/distributed/peers/* [expose:search_distributed_groups] methods = POST,GET pattern = search/distributed/groups [expose:search_distributed_groups_ELEMENT] methods = GET,DELETE,POST pattern = search/distributed/groups/* [expose:search_distributed_groups_ELEMENT_edit] methods = POST pattern = search/distributed/groups/*/edit [expose:search_fields] pattern = search/fields [expose:search_fields_ELEMENT] pattern = search/fields/* [expose:search_fields_ELEMENT_tags] methods = GET,POST pattern = search/fields/*/tags [expose:search_intentionsparser] methods = GET,POST pattern = search/intentionsparser [expose:search_jobs] methods = GET,POST pattern = search/jobs [expose:search_jobs_ELEMENT] methods = GET,DELETE,POST pattern = search/jobs/* oidEnabled = 1 [expose:search_jobs_ELEMENT_acl] methods = POST pattern = search/jobs/*/acl [expose:search_jobs_ELEMENT_control] methods = POST pattern = search/jobs/*/control [expose:search_jobs_ELEMENT_events] methods = GET,POST pattern = search/jobs/*/events oidEnabled = 1 [expose:search_jobs_ELEMENT_results] methods = GET,POST pattern = search/jobs/*/results [expose:search_jobs_ELEMENT_results_preview] methods = GET,POST pattern = search/jobs/*/results_preview oidEnabled = 1 [expose:search_jobs_ELEMENT_search.log] pattern = search/jobs/*/search.log [expose:search_jobs_ELEMENT_summary] pattern = search/jobs/*/summary [expose:search_jobs_ELEMENT_timeline] pattern = search/jobs/*/timeline [expose:search_jobs_export] methods = GET,POST pattern = search/jobs/export [expose:search_parser] methods = GET,POST pattern = search/parser [expose:search_shelper] pattern = search/shelper [expose:search_tags] pattern = search/tags [expose:search_tags_ELEMENT] methods = GET,POST,DELETE pattern = search/tags/* [expose:search_timeparser] pattern = search/timeparser [expose:search_typeahead] pattern = search/typeahead [expose:server_control] pattern = server/control [expose:server_control_restart] methods = POST pattern = server/control/restart [expose:server_info] pattern = server/info [expose:server_info_ELEMENT] pattern = server/info/* [expose:server_logger] pattern = server/logger [expose:server_logger_ELEMENT] methods = GET,POST pattern = server/logger/* [expose:server_settings] pattern = server/settings [expose:server_settings_ELEMENT] methods = GET,POST pattern = server/settings/* [expose:services_cluster_master_control_control_rebalance_buckets] methods = POST pattern = cluster/master/control/control/rebalance_buckets [expose:static_ELEMENT] pattern = static/* [expose:storage_collections_ANYTHING] methods = GET,DELETE,POST pattern = storage/collections/** [expose:storage_collections-conf_ANYTHING] methods = GET,DELETE,POST pattern = storage/collections-conf/** [expose:storage_passwords] methods = POST,GET pattern = storage/passwords [expose:storage_passwords_ELEMENT] methods = GET,DELETE,POST pattern = storage/passwords/* [expose:ui_tours] methods = GET,DELETE,POST pattern = data/ui/ui-tour [expose:ui_tours_ELEMENT] methods = GET,DELETE,POST pattern = data/ui/ui-tour/* [expose:livetail] methods = GET,DELETE,POST pattern = data/ui/livetail [expose:livetail_ELEMENT] methods = GET,DELETE,POST pattern = data/ui/livetail/* [expose:appsbrowser] methods = GET pattern = appsbrowser [expose:appsbrowser_ELEMENT] methods = GET,POST pattern = appsbrowser/** [expose:alert_actions] methods = GET,DELETE,POST pattern = alerts/alert_actions [expose:alert_actions_ELEMENT] methods = GET,DELETE,POST pattern = alerts/alert_actions/* [expose:alert_actions_ELEMENT_acl] methods = GET,POST pattern = alerts/alert_actions/*/acl [expose:alert_actions_ui] methods = GET,DELETE,POST pattern = data/ui/alerts [expose:alert_actions_ui_ELEMENT] methods = GET,DELETE,POST pattern = data/ui/alerts/* [expose:alert_actions_ui_ELEMENT_acl] methods = GET,POST pattern = data/ui/alerts/*/acl [expose:visualizations] pattern = configs/conf-visualizations [expose:ast] methods = POST pattern = search/ast [expose:datasets] methods = GET pattern = datasets [expose:watchdog_pstacks] methods = GET pattern = server/pstacks [expose:watchdog] methods = POST pattern = server/watchdog [expose:scs_tenantinfo] methods = GET pattern = server/scs/tenantinfo [expose:telemetry_metric] methods = POST pattern = telemetry-metric [expose:diag] methods = GET, DELETE pattern = diag [expose:diag/status] methods = GET pattern = diag/status allowRemoteProxy = true [expose:admin_splunk_auth] methods = POST,GET pattern = admin/Splunk-auth [expose:admin_splunk_auth_ELEMENT] methods = POST,GET,DELETE pattern = admin/Splunk-auth/* [expose:federated_indexes] methods = POST,GET pattern = data/federated/index [expose:federated_indexes_ELEMENT] methods = POST,GET,DELETE pattern = data/federated/index/* [expose:federated_indexes_ELEMENT_disable] methods = POST pattern = data/federated/index/*/disable [expose:federated_indexes_ELEMENT_enable] methods = POST pattern = data/federated/index/*/enable [expose:federated_provider] methods = POST, GET pattern = data/federated/provider [expose:federated_provider_ELEMENT] methods = POST,GET,DELETE pattern = data/federated/provider/* [expose:federated_provider_ELEMENT_disable] methods = POST pattern = data/federated/provider/*/disable [expose:federated_provider_ELEMENT_enable] methods = POST pattern = data/federated/provider/*/enable [expose:federated_settings] methods = POST, GET pattern = data/federated/settings [expose:federated_settings_ELEMENT] methods = POST,GET,DELETE pattern = data/federated/settings/* [expose:admin_token_auth] methods = POST,GET pattern = admin/Token-auth [expose:admin_token_auth_ELEMENT] methods = POST,GET pattern = admin/Token-auth/* [expose:authorization_tokens] methods = POST,GET pattern = authorization/tokens [expose:authorization_tokens_ELEMENT] methods = POST,GET,DELETE pattern = authorization/tokens/* [expose:remote-proxy] methods = POST,GET pattern = remote-proxy/** [expose:spl2_modules] methods = POST,GET,DELETE,PUT pattern = spl2/modules/** [expose:spl2-module-dispatch] methods = POST pattern = search/spl2-module-dispatch
