The Settings section, in a nutshell, is an interface for managing configuration files. The number of files and options in these configuration files is truly daunting, so the web interface concentrates on the most commonly used options across the different configuration types.
Splunk is controlled exclusively by plain text configuration files. Feel free to take a look at the configuration files that are being modified as you make changes in the admin interface. You will find them by hitting the following locations:
$SPLUNK_HOME/etc/system/local/ $SPLUNK_HOME/etc/apps/ $SPLUNK_HOME/etc/users/<user>/<app>/local
You may notice configuration files with the same name at different locations. We will cover in detail the different ...
