icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Config Explorer
SHA256 checksum (config-explorer_1715.tgz) 83a3340cbba7b3a893a5bc14df3149c419b781259b74846ecc724caddc4d1ec9 SHA256 checksum (config-explorer_1614.tgz) 299a7836113b5fb42806c84ab477348926b616efef20d1d31b8073a0bb8eb871 SHA256 checksum (config-explorer_1513.tgz) 1327a5eb956daba61f82538ccd471ab3e01e1e32d5dd47171c742c4055ff53f8 SHA256 checksum (config-explorer_1512.tgz) 07a71b8a1bc79099d22922b366c5d0bca2483ee7348215b343d61cf2ec753be2 SHA256 checksum (config-explorer_1511.tgz) ca591b2a3e967214c7e6d2272f4d50b4a43fe09b6d7e4831975898171909f5ee SHA256 checksum (config-explorer_149.tgz) 050dfd82953e0baf8739e20c032cb6be3ea4c148875367f481c1c638c3945060 SHA256 checksum (config-explorer_147.tgz) 7ab1bf526960bfb0f473784f22b1d9d0a551d9c09267dc07f7aea6021d5a7ab3 SHA256 checksum (config-explorer_146.tgz) a97dc6a0d527e1c6fa5e31b10e640d50dfb8c41127d75ce9ad3150451e7508eb SHA256 checksum (config-explorer_135.tgz) f2e8e0da52d03a96beb43741a3ee38ef3ad641bd6648b630864496d6a770cf77 SHA256 checksum (config-explorer_125.tgz) b56726fac9acc06584ae6ce764eab5dc07338ffcee530619837f955502fe905e SHA256 checksum (config-explorer_115.tgz) 7ee36ab203e73fa28b212062931fea033a430dc62d5f105d087bc546b9362018 SHA256 checksum (config-explorer_114.tgz) 2ca0cec1cd37155576719f3e7e3ff46b228f7601b4e4c1d6817c9744eff96a1a SHA256 checksum (config-explorer_113.tgz) 71d340a1eeb755a0747c51b2be117d5f7d77b94c16858163113108b2bf88125d SHA256 checksum (config-explorer_101.tgz) 3bd42a78d9678ca3fea5d62bbb5b01042a2e010fe34c841b2bfd15976608a328
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

splunk

Config Explorer

Overview
Details
This app provides a editor interface for viewing and editing Splunk files. It has the following features:

* Code completion and tooltip hinting for '.conf' files (by loading the Splunk '.spec' files)
* Code gutter highlights if the line can be found in btool and if it is valid according to spec files
* Displays the spec files relevant to your Splunk installation
* Diff files
* Provides a syntax-highlighted interface to btool, and allows diffing against the currently running config
* Embeds the excellent Microsoft Monaco editor (Visual Studio Code) - with three themes
* Provides useful developer hooks (bump, debug refresh etc) that can be customised and extended
* Optional version control of all changes by committing them to a git repository before and after changes
* Works on Linux and Windows (it is quite slow on Windows)

By default, the app is not able to save files, but this can be enabled from the "Settings" link.
As this app provides unrestricted access to Splunk files, users must have the "admin" role to see the app.

Please read the warnings on the "details" page.

Click here to show your appreciation or please just leave a rating by clicking above!

Source code | Feature requests and bugs | My other apps

Important warnings:

This app allows changing of files just like you are on the filesystem; it should be used very carefully in any environment that you care about.

  • Do not use this app on Search Head clusters to change files becuase it won't sync changes to cluster members
  • This app does not automatically update the Splunk running config (except for properties like search-time extractions which
    Splunk does regularly re-read)
  • There are no built-in restrictions on viewing secrets files or passwords. Don't make this app available to
    users who should not see that sort of thing
  • There are also no restrictions that prevent editing files in default/ folders. You should follow normal Splunk
    best practices and only edit the /local/*.conf files or files in default/ if you are the developer of that app
  • When performing file operations, this app inherits the permissions of the user account that is running Splunk.
  • All Splunk apps inherit the permissions of the Splunk user and can do things without your knowing. If
    you care about your Splunk instance, you should code review all apps before installing them
  • Don't run Splunk as root. If you do, this app can allow you to run commands as root which is very dangerous
  • Please don't waste time trying to get this installed on Splunk Cloud

There are examples of how to create common custom actions for the home tab (reload deploy-server, bundle push etc). Look at the file ./etc/apps/config_explorer/default/config_explorer.conf.example

Is your server a deployment-server or search head cluster deployer, and you would like to use btool on the apps that are pushed? If so, read etc/apps/config_explorer/default/config_explorer.conf.example.

There is some basic audit logging here:

index=_internal source="*config_explorer.log"

Copyright (C) 2019 Chris Younger
I am a Splunk Professional Services consultant working for JDS Australia (https://www.jds.net.au), in Brisbane Australia.

Using git auto-commit

Before enabling the git auto-complete feature you must first create a git repository somewhere. For example:

$ cd /opt/splunk/etc
$ git init

You will probably also need to set a username and email address for config_explorer to use for commits:

git config user.name config_explorer
git config user.email config_explorer@example.com

If you wish to use a non-standard git repository location, you can set these environment variables:

export GIT_DIR=/opt/splunk/.git/
export GIT_WORK_TREE=/opt/splunk/

You will need to consider your .gitignore file. If your directory already has .gitignore files in it, you
may instead need to make a .gitignore file that ignores deeper nested .gitignore files.

Finally, if you want to push changes to an external repo, I would recommend you create a script input
to do so, or alternatively, see my custom git app here: https://splunkbase.splunk.com/app/4182/

Locking it down

In order to prevent file editing semi-permanantly, set write_access = false and hide_settings = true.
This will prevent being able to change settings until someone changes files directly on the filesystem.

Third party software

The following third-party libraries are used by this app. Thank you!

Release Notes

Version 1.7.15
Oct. 3, 2022

v 1.7.15 - 2022-10-03 * You can now right click on text that looks like file paths and select "Attempt to open" to open a file or navigate to a folder * There is some new default hooks in default/config_explorer.conf * Post-save options are now shown in a slide-up panel * Add special support for manager-apps folder * New preferences option to show full paths in tab bar

v 1.6.14 - 2022-05-15 * Fixed to no longer use HTML dashboards

v 1.5.13 - 2022-03-08 * Fix some btool errors

Version 1.6.14
May 14, 2022

v 1.6.14 - 2022-05-15
* Fixed to no longer use HTML dashboards

v 1.5.13 - 2022-03-08
* Fix some btool errors

v 1.5.12 - 2022-03-01
Hover tooltips less hyperactive and a preference option to disable
Improved gutter hinting for configuration in master-apps (for cluster manager servers)
New option to right-click and provide direct link to a section of code
New ability to reload deploy-server (for deployment servers). Right click on files in the deployment-apps directory to use.
As Config Explorer uses a persistent rest process, it may need a Splunk restart for the reload deploy-server to work.

v 1.4.9 - 2020-06-09
* Python 3 fixes

Version 1.5.13
March 8, 2022

v 1.5.13 - 2022-03-08
* Fix some btool errors

v 1.5.12 - 2022-03-01
Hover tooltips less hyperactive and a preference option to disable
Improved gutter hinting for configuration in master-apps (for cluster manager servers)
New option to right-click and provide direct link to a section of code
New ability to reload deploy-server (for deployment servers). Right click on files in the deployment-apps directory to use.
As Config Explorer uses a persistent rest process, it may need a Splunk restart for the reload deploy-server to work.

v 1.4.9 - 2020-06-09
* Python 3 fixes

v 1.4.7 - 2020-04-08
* Better error handling for folders that contain symlinks

v 1.4.6 - 2020-04-05
Will show a warning message if an open file has been changed.
Files are now saved with the correct line endings instead of defaulting to Windows line endings.
Added hotkeys to quickly navigate between tabs. ALT-SHIFT-[LEFT,RIGHT,UP]
The left pane now shows file size and last modified time for files (drag panel to make it wider)

Version 1.5.12
Feb. 28, 2022

v 1.5.12 - 2022-03-01
Hover tooltips less hyperactive and a preference option to disable
Improved gutter hinting for configuration in master-apps (for cluster manager servers)
New option to right-click and provide direct link to a section of code
New ability to reload deploy-server (for deployment servers). Right click on files in the deployment-apps directory to use.
As Config Explorer uses a persistent rest process, it may need a Splunk restart for the reload deploy-server to work.

v 1.4.9 - 2020-06-09
* Python 3 fixes

v 1.4.7 - 2020-04-08
* Better error handling for folders that contain symlinks

v 1.4.6 - 2020-04-05
Will show a warning message if an open file has been changed.
Files are now saved with the correct line endings instead of defaulting to Windows line endings.
Added hotkeys to quickly navigate between tabs. ALT-SHIFT-[LEFT,RIGHT,UP]
The left pane now shows file size and last modified time for files (drag panel to make it wider)

Version 1.5.11
Feb. 27, 2022

v 1.5.11 - 2022-02-28
Hover tooltips less hyperactive and a preference option to disable
Improved gutter hinting for configuration in master-apps (for cluster manager servers)
New option to right-click and provide direct link to a section of code
New ability to reload deploy-server (for deployment servers). Right click on files in the deployment-apps directory to use.
As Config Explorer uses a persistent rest process, it may need a Splunk restart for the reload deploy-server to work.

v 1.4.9 - 2020-06-09
* Python 3 fixes

v 1.4.7 - 2020-04-08
* Better error handling for folders that contain symlinks

v 1.4.6 - 2020-04-05
Will show a warning message if an open file has been changed.
Files are now saved with the correct line endings instead of defaulting to Windows line endings.
Added hotkeys to quickly navigate between tabs. ALT-SHIFT-[LEFT,RIGHT,UP]
The left pane now shows file size and last modified time for files (drag panel to make it wider)

Version 1.4.9
June 9, 2020

v 1.4.9 - 2020-06-09
* Python 3 fixes

v 1.4.7 - 2020-04-08
* Better error handling for folders that contain symlinks

v 1.4.6 - 2020-04-05
Will show a warning message if an open file has been changed.
Files are now saved with the correct line endings instead of defaulting to Windows line endings.
Added hotkeys to quickly navigate between tabs. ALT-SHIFT-[LEFT,RIGHT,UP]
The left pane now shows file size and last modified time for files (drag panel to make it wider)

v 1.3.5 - 2020-02-09
Upgrade Monaco editor from 0.15 to 0.19.3
Fixes for python 3
* Removed restrictions around saving files/folders with extended characters in the name

v 1.2.5 - 2019-07-21
Fix bugs in "Download" functionality and Splunk 7.3 on Windows (Thanks Brett)
Enhancements for using btool on shcluster and deployment-apps folders (Thanks neusse)
* Enhancements for hiding only system/defaults in btool (Thanks Marco)

Version 1.4.7
April 8, 2020

v 1.4.7 - 2020-04-08
* Better error handling for folders that contain symlinks

v 1.4.6 - 2020-04-05
Will show a warning message if an open file has been changed.
Files are now saved with the correct line endings instead of defaulting to Windows line endings.
Added hotkeys to quickly navigate between tabs. ALT-SHIFT-[LEFT,RIGHT,UP]
The left pane now shows file size and last modified time for files (drag panel to make it wider)

v 1.3.5 - 2020-02-09
Upgrade Monaco editor from 0.15 to 0.19.3
Fixes for python 3
* Removed restrictions around saving files/folders with extended characters in the name

v 1.2.5 - 2019-07-21
Fix bugs in "Download" functionality and Splunk 7.3 on Windows (Thanks Brett)
Enhancements for using btool on shcluster and deployment-apps folders (Thanks neusse)
* Enhancements for hiding only system/defaults in btool (Thanks Marco)

Version 1.4.6
April 5, 2020

v 1.4.6 - 2020-04-05
Will show a warning message if an open file has been changed.
Files are now saved with the correct line endings instead of defaulting to Windows line endings.
Added hotkeys to quickly navigate between tabs. ALT-SHIFT-[LEFT,RIGHT,UP]
The left pane now shows file size and last modified time for files (drag panel to make it wider)

v 1.3.5 - 2020-02-09
Upgrade Monaco editor from 0.15 to 0.19.3
Fixes for python 3
* Removed restrictions around saving files/folders with extended characters in the name

v 1.2.5 - 2019-07-21
Fix bugs in "Download" functionality and Splunk 7.3 on Windows (Thanks Brett)
Enhancements for using btool on shcluster and deployment-apps folders (Thanks neusse)
* Enhancements for hiding only system/defaults in btool (Thanks Marco)

Version 1.3.5
Feb. 9, 2020
  • Upgrade Monaco editor from 0.15 to 0.19.3
  • Fixes for python 3
  • Removed restrictions around saving files/folders with extended characters in the name
Version 1.2.5
July 21, 2019

Version 1.2.5
Fix bugs in "Download" functionality and Splunk 7.3 on Windows (Thanks Brett)
Enhancements for using btool on shcluster and deployment-apps folders (Thanks neusse)
* Enhancements for hiding only system/defaults in btool (Thanks Marco)

Version 1.1.5
* New right-click option to download file

Version 1.1.4
The "post-save" can now reuse tabs and can run in the background so it doesn't interrupt development flow.
You can now add custom actions as buttons on the home tab. Including actions that require splunk authentication.
Added preferences screen for setting word-wrap, visible whitespace and any other monaco editor settings.
Added a "reload from disk" right-click option.

Full change log here: https://github.com/ChrisYounger/config_explorer/commits/master

Version 1.1.5
July 2, 2019

Version 1.1.5
* New right-click option to download file

Version 1.1.4
The "post-save" can now reuse tabs and can run in the background so it doesn't interrupt development flow.
You can now add custom actions as buttons on the home tab. Including actions that require splunk authentication.
Added preferences screen for setting word-wrap, visible whitespace and any other monaco editor settings.
Added a "reload from disk" right-click option.

Full change log here: https://github.com/ChrisYounger/config_explorer/commits/master

Version 1.1.4
May 19, 2019
  • The "post-save" can now reuse tabs and can run in the background so it doesn't interrupt development flow.
  • You can now add custom actions as buttons on the home tab. Including actions that require splunk authentication.
  • Added preferences screen for setting word-wrap, visible whitespace and any other monaco editor settings.
  • Added a "reload from disk" right-click option.

Full change log here: https://github.com/ChrisYounger/config_explorer/commits/master

Version 1.1.3
March 4, 2019

Full change log here: https://github.com/ChrisYounger/config_explorer/commits/master

  • new feature to set an action to run after every save of a file
  • improve btool gutter matching of stanzas with windows paths in them
  • support for mac
  • fix some logging issues
Version 1.0.1
Feb. 3, 2019

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.