AnonymousFox

//opt/splunkforwarder/etc/system/default/federated.conf

# Version 9.4.7
# DO NOT EDIT THIS FILE!
# Changes to default files will be lost on update and are difficult to
# manage and support.
#
# Please make any changes to system defaults by overriding them in
# apps or $SPLUNK_HOME/etc/system/local  
# (See "Configuration file precedence" in the web documentation).
#
# To override a specific setting, copy the name of the stanza and
# setting to the file where you wish to override it.
#
#
[default]

[provider:splunk]
type = splunk
useFSHKnowledgeObjects = false
mode = standard

[general]
needs_consent = true
controlCommandsMaxThreads = 5
controlCommandsMaxTimeThreshold = 5
controlCommandsFeatureEnabled = true
previewOnRshEnabled = false
proxyBundlesTTL = 172800
remoteEventsDownloadRetryCountMax = 20
remoteEventsDownloadRetryTimeoutMs = 1000
max_preview_generation_duration = 0
max_preview_generation_inputcount = 0
enable_streaming_optimization = false
federated_search_remote_ttl = 600
allowAstProjectionElim = false
allowAstPredicateMerge = false
allowAstInsertRedistributeCommand = false
allowAstReplaceChartCmdsWithTstats = false
allowAstReplaceDatamodelStatsCmdsWithTstats = false
allowAstReplaceTableWithFields = false
allowAstReplaceSdselectWithSdsql = false

[s2s_standard_mode_unsupported_command:metadata]

[s2s_standard_mode_unsupported_command:metasearch]

[s2s_transparent_mode_unsupported_command:makeresults]
allow_target = true

[s2s_transparent_mode_unsupported_command:delete]

[s2s_transparent_mode_unsupported_command:dump]

[s2s_transparent_mode_unsupported_command:map]

[s2s_transparent_mode_unsupported_command:run]

[s2s_transparent_mode_unsupported_command:runshellscript]

[s2s_transparent_mode_unsupported_command:script]

[s2s_transparent_mode_unsupported_command:rest]

[s2s_transparent_mode_unsupported_command:summarize]
active = true
rsh_min_version_cloud = 9.0.2303.100
rsh_min_version_onprem = 9.1.0

[s2s_transparent_mode_unsupported_command:tstats]
active = true
rsh_min_version_cloud = 9.0.2303.100
rsh_min_version_onprem = 9.1.0