Download configurations installed on forwarders

You can download the configuration files that are installed on a given forwarder and open the files in a text editor of your choice.

  1. Log in to Splunk Enterprise.
  2. Select the settings icon (Settings), and then under the Distributed Environment section, select Agent management.

    The Agent management page opens.

  3. On the Agent management page, select a forwarder on which the Effective Configuration add-on is installed.
  4. On the Forwarder page, select the Effective Configuration tab.
  5. Select Download effective configuration. The files with configuration are downloaded as a zip folder. It contains 4 .conf files in text format: inputs.conf, outputs.conf, deploymentclient.conf, server.conf.
  6. You can open and view the files in a text editor of your choice.