Trying to get a Windows environment moved into a Linux environment, and having problems finding where props.conf is applied to the data. There's no props.conf in local on the search heads, the cluster head or the indexers. Nor are there props.conf in the apps directory of those servers. The search heads are pooled, so I checked the following location: `c:\dfsroot\SearchHeadPooling\etc\apps\search\local\props.conf`, but it only has field extractions created inside splunk.
There's no app on the deployment server that includes a props.conf.
Where the deuce are these properties being applied?
↧