literals.conf
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Contents
literals.conf
literals.conf controls what literal text displays and how literal text is displayed in SplunkWeb. EuroDate formatting is configured here.
literals.conf.spec
# This file contains possible attribute/value pairs for configuring externalized strings in # literals.conf. # # There is a literals.conf in the default bundle. To set custom configurations, place a # literals.conf in your own custom bundle directory. # # For help creating a bundle directory, or to learn more about bundles (including bundle precedence) # please see the documentation located at http://www.splunk.com/doc/latest/admin/bundleconfig. # # For the full list of all literals that can be overridden, check out # $SPLUNK_HOME/etc/bundles/default/literals.conf. [cli] #******************************************************************************# # UI #****************************************************************************** # In general, strings in the [ui] stanza can be changed if you follow these guidelines. # NOTE: Do not add or remove any occurrences of "%s", or reorder their positions. [ui] SEARCH_TERM_TIME_FORMAT = %m/%d/%Y:%H:%M:%S * Used for starttime:: and endtime:: searchterms, across all of SplunkWeb. * IMPORTANT: Swap %m and %d for European date formats. * In general, however the full range of format strings is not supported, and other changes or omissions may cause significant problems in the UI. SEARCH_RESULTS_TIME_FORMAT = %m/%d/%Y %H:%M:%S * This is the general format string for events and timeline. * For the search results themselves, Splunk replaces four-digit %Y with two-digit %y. * When changing or swapping values, see above IMPORTANT note above. # The following messages display in SplunkWeb. You can change the string after the = to anything you want. HTTP_UNAUTHORIZED_MESSAGE = You are not logged in with a valid username for Splunk. FUNCTIONALITY_UNAVAILABLE_WHILE_HOSTED_MESSAGE = This feature is not available on the demo version. PASSWORDS_DONT_MATCH_MESSAGE = The passwords you typed do not match. FULL_NAME_CANNOT_BE_BLANK_MESSAGE = The fullname field cannot be blank. NAME_CANNOT_BE_BLANK_MESSAGE = The username field cannot be blank. UNABLE_TO_CONNECT_MESSAGE = Could not connect to splunkd at %s. REFRESH_LINK_TEXT = Refresh PRO_SERVER_LOGIN_HEADER = Login to Splunk FREE_SERVER_WELCOME_HEADER = Welcome to Splunk LOGGED_IN_AS = Logged in as HELP_LINK_TEXT = Help ABOUT_LINK_TEXT = About #****************************************************************************** # UI chrome #****************************************************************************** PRO_VERSION_WINDOW_TITLE = Splunk %s FREE_VERSION_WINDOW_TITLE = Splunk %s SERVER_RESTART_MESSAGE_ADMIN = You need to restart the Splunk Server for your changes to take effect. <span class="divider">|</span> To restart, go to the <a href="/admin/settings/control">Server > Control</a> screen. SERVER_RESTART_MESSAGE = This Splunk Server's configuration has been changed. The server needs to be restarted by an administrator. #****************************************************************************** # UI-XSL settings # Strings in the [ui-xsl] stanza can be changed here. #****************************************************************************** [ui-xsl] # # saved searches # NO_SAVED_SPLUNKS_MESSAGE = You have no Saved Searches NO_LIVE_SPLUNKS_MESSAGE = Alerts are scheduled searches that can alert you via email, RSS or shell script. NO_ALERT_HISTORY_MESSAGE = None # # distributed # HAS_NO_SPLUNKTCP_PEERS = has not received data from any servers. HAS_NO_SPLUNKTCP_PEERS_BUT_IS_LISTENING = is listening on port <xsl:value-of select='/envelope/distributedOverview/singleReceivingPort' />, but has not received any data. HAS_NO_SEARCH_PEERS = is not distributing search requests to any servers. HAS_NO_SEARCH_PEERS_BUT_IS_DISTRIBUTED = has distributed search enabled, but no servers configured. HAS_NO_DISCOVERED_SERVERS = None HAS_NO_FORWARDING_PEERS = is not forwarding data. # # tooltips # FILTER_ROW_TOOLTIP = click to restrict your search to this # # byte quota / EULA licensing # MAX_VIOLATIONS_HIT = Search is blocked until you drop below 7 violations in the most recent 30 days. To upgrade, call us (1.866.GET.SPLUNK) or visit <a target="_blank" href="http://www.splunk.com/store/home">splunk.com/store</a>. # currently set to 1 week = 604800 seconds BYTE_QUOTA_VIOLATION_MESSAGING_PERIOD = 604800 BYTE_QUOTA_EXCEEDED_MESSAGE_SEVERE_PRO = Your index exceeded your %s/day limit—this makes %s times. To upgrade, call us (1.866.GET.SPLUNK) or visit <a target="_blank" href="http://www.splunk.com/store/home">splunk.com/store</a>. BYTE_QUOTA_EXCEEDED_MESSAGE_SEVERE_FREE = Your index exceeded the free %s/day limit—this makes %s times. Sign up for a <a target="_blank" href="http://www.splunk.com/r/pro_free_trial ">30-day free trial</a> of Splunk. BYTE_QUOTA_EXCEEDED_MESSAGE_SEVERE_PRO = Your index exceeded your %s/day limit again. Do you need Splunk in a larger size? Call us (1.866.GET.SPLUNK) or visit <a target="_blank" href="http://www.splunk.com/store/home">splunk.com/store</a>. BYTE_QUOTA_EXCEEDED_MESSAGE_SEVERE_FREE = Your index exceeded the free %s/day limit on new index contents again. Do you need more room? Sign up for a <a target="_blank" href="http://www.splunk.com/r/pro_free_trial">30-day free trial</a> of Splunk. BYTE_QUOTA_EXCEEDED_MESSAGE_MILD_PRO = Your index exceeded your %s/day limit. Do you need Splunk in a larger size? Call us (1.866.GET.SPLUNK) or visit the <a target="_blank" href= "http://www.splunk.com/store/home">Splunk Store</a>. BYTE_QUOTA_EXCEEDED_MESSAGE_MILD_FREE = Your index exceeded the free %s/day limit on new index contents. Sign up for a <a target="_blank" href="http://www.splunk.com/r/pro_free_trial">30- day free trial</a> of Splunk. #what does this =? BYTE_QUOTA_EXCEEDED_MESSAGE_RECENT_FREE = Your index exceeded the free %s/day limit on new index contents again. Do you need more room? Sign up for a <a target="_blank" href="http://www.splunk.com/r/pro_free_trial">30-day free trial</a> of Splunk. BYTE_QUOTA_EXCEEDED_MESSAGE_RECENT_PRO = Your index exceeded your %s/day limit again. Do you need Splunk in a larger size? Call us (1.866.GET.SPLUNK) or visit <a target="_blank" href="http://www.splunk.com/store/home">splunk.com/store</a>. UNLICENSED_NOTIMELEFT_MESSAGE = This is an expired copy of Splunk. To use it, enter a <a href="/admin/license">license</a>. UNLICENSED_SOMETIMELEFT_MESSAGE = Your trial Enterprise license expires in %s %s. To buy an Enterprise license, go to the Splunk <a target="_blank" href="http://www.splunk.com/store/home">Store</a>. TWO_DOT_X_MESSAGE_LOGIN = Splunk 3.0 requires a new license key. Please contact <a href="mailto:support@splunk.com">support@splunk.com</a> to get a new license key. LICENSE_EXPIRE_MESSAGE_LOGIN = This is an expired copy of Splunk. To revert to the free version of Splunk copy $SPLUNK_HOME/etc/splunk-free.license over $SPLUNK_HOME/etc/splunk.license. To renew, visit <a target="_blank" href="http://www.splunk.com/r/renew">splunk.com/r/renew</a>. LICENSE_EXPIRE_MESSAGE = Your Splunk license expires on %s. To renew, visit <a target="_blank" href="http://www.splunk.com/r/renew">splunk.com/r/renew</a>. LICENSE_HAS_EXPIRED_MESSAGE = Your Splunk license expired on %s. To renew, visit <a target="_blank" href="http://www.splunk.com/r/renew"> splunk.com/r/renew</a>. MAX_VIOLATIONS_HIT = You have exceeded your daily limit 3 times in the past 30 days. To upgrade, call us (1.866.GET.SPLUNK) or visit <a target="_blank" href="http://www.splunk.com/store/home">splunk.com/store</a>. # # user conversion messaging # PRO_ONLY_FEATURE_COOKED_RECEIVING = This feature requires a Splunk Enterprise license.<br/><br/><a href='http://www.splunk.com/r/signup/'>Sign up</a> and get a 30 day trial enterprise license. PRO_ONLY_FEATURE_DISTRIBUTED_SEARCH = This feature requires a Splunk Enterprise license.<br/><br/><a href='http://www.splunk.com/r/signup/'>Sign up</a> and get a 30 day trial enterprise license. PRO_ONLY_FEATURE_AUTHENTICATION_CONFIGURATION = Authentication Configuration requires a Splunk enterprise license. This feature lets you specify how Splunk authenticates users -- by Splunk server, LDAP or ActiveDirectory. Splunk is currently running with a free license, which has no access controls. <br/><br/><a href='/admin/license/upgrade'>Get</a> a trial enterprise license. <a href='http://www.splunk.com/r/free_vs_enterprise' target='splunk'>Compare</a> free versus enterprise. PRO_ONLY_FEATURE_LIVE_SPLUNKS = Alerts require a Splunk license. <a href='/admin/license/upgrade'>Sign up</a> for a free trial enterprise license. #SORRY about the lack of newlines, but bundles get upset with newlines in this particular key for some reason, and spit out another key with keyname=<a href GENERIC_FREE_GET_ENTERPRISE_MESSAGE = <p>You are running Splunk with a Free license which allows you to index up to 500MB a day.</p><p>With an Enterprise license you get:</p><ul><li>Higher data indexing volumes</li><li>Multiple user accounts and access controls</li><li>Distributed search and data routing</li><li>Deployment management</li></ul><p><a href="http://www.splunk.com/r/signup">Get a trial Enterprise license.</a></p> LOGIN_PAGE_FREE_GET_ENTERPRISE_MESSAGE = <p>You are running Splunk with a Free license.</p><p>You can index up to 500MB a day.</p><p>When you upgrade to an Enterprise license you get:</p><ul><li>Higher data indexing volumes</li><li>Multiple user accounts and access controls</li><li>Distributed search and data routing</li><li>Deployment management</li></ul><p>Sign-up and get a 30 day trial Enterprise license.</p><div class="buttonRow"><div class="primary"><a href="http://www.splunk.com/r/signup" target="splunk"><input type="button" name="submit" value="Get license"/></a></div></div> RESTRICTED_FEATURE_PAGE_GENERIC_FREE_GET_ENTERPRISE_MESSAGE = <p>You are running Splunk with a Free license. This feature requires an Enterprise license.</p><p>With an Enterprise license you get:</p><ul><li>Higher data indexing volumes</li><li>Multiple user accounts and access controls</li><li>Distributed search and data routing</li><li>Deployment management</li></ul><p><a href="http://www.splunk.com/r/signup">Sign up</a> and get a 30 day trial enterprise license.</p><p>Already have an Enterprise license? Update your license <a href="/admin/license">here</a>.</p> ADMIN_TAB_GENERIC_FREE_GET_ENTERPRISE_MESSAGE = <p>You are running Splunk with a Free license.</p><p>With an Enterprise license you get:</p><ul><li>Higher data indexing volumes</li><li>Multiple user accounts and access controls</li><li>Distributed search and data routing</li><li>Deployment management</li></ul><p><a href="http://www.splunk.com/r/signup">Sign up</a> and get a 30 day trial enterprise license.</p> FREE_VERSION_NAGWARE_STRING = You are running Splunk with a Free license. <a href="http://www.splunk.com/r/signup" target="_blank">Sign-up</a> and get a 30 day trial Enterprise license. # # DATAINPUTS STRINGS # NO_DATA_INPUTS_CONFIGURED = None INTERNAL_SINKHOLE_LABEL = Spooled Files and Directories DYNAMIC_TAIL_LIST_LABEL = Contents of DATA_INPUT_ADD_INPUT_LABEL = Add input DATA_INPUT_ADD_FILE_LABEL = Add file DATA_INPUT_NO_ACTION_LABEL = None DATA_INPUT_EDIT_LABEL = Edit DATA_INPUT_REMOVE_LABEL = Remove ACCEPT_CONNECTIONS_QUESTION = Accept connections from all hosts? ADMIN_LINK_TEXT = Admin NON_ADMIN_USER_ADMIN_LINK_TEXT = My Account SEARCH_LINK_TEXT = Search # ////////////////////////////////////////////////////////////////////////////// # saved searches admin # ////////////////////////////////////////////////////////////////////////////// [ui-admin-section-labels-/admin/saved] query = Search name = Name isGlobal = Share with all users? cronschedule = Run every advsched = Cron schedule action = Action nextrun = Next run counttype = When relation = becomes quantity = this number enableSched = Run this search on a schedule sendresults = Attach results in body of email action_email = Send email (comma-separated list of email addresses) action_rss = Create an RSS feed action_script = Trigger shell script tags = Tag # ////////////////////////////////////////////////////////////////////////////// # user admin # ////////////////////////////////////////////////////////////////////////////// [ui-admin-section-labels-/admin/users] name = Username realName = Full name userType = Role # ////////////////////////////////////////////////////////////////////////////// # auth admin # ////////////////////////////////////////////////////////////////////////////// [ui-admin-section-labels-/admin/settings/auth] host = Host port = Port SSLEnabled = SSL enabled bindDN = Bind DN bindDNpassword = Bind DN password userBaseDN = User base DN groupBaseDN = Group base DN userNameAttribute = User name attribute realNameAttribute = Real name attribute groupNameAttribute = Group name attribute groupMemberAttribute = Group member attribute groupMappingAttribute = Group mapping attribute userBaseFilter = User base filter groupBaseFilter = Group base filter failsafeLogin = Failsafe user failsafePassword = Failsafe password
literals.conf.spec
# Copyright (C) 2005-2008 Splunk Inc. All Rights Reserved. Version 3.0 # # This file contains an example literals.conf. Use this file to configure the externalized strings # in Splunk. # # To use one or more of these configurations, copy the configuration block into # literals.conf in your own custom bundle. # # For help creating a bundle directory, or to learn more about bundles (including bundle precedence) # please see the documentation located at http://www.splunk.com/doc/latest/admin/bundleconfig. # # For the full list of all literals that can be overridden, consult the far longer list in # $SPLUNK_HOME/etc/bundles/default/literals.conf # # NOTE: When strings contain "%s", do not add or remove any occurrences of %s, or reorder their positions. # NOTE: When strings contain HTML tags, take special care to make sure that all tags and quoted # attributes are properly closed, and that all entities such as & are escaped. # ////////////////////////////////////////////////////////////////////////////// # UI/Appserver embedded strings # ////////////////////////////////////////////////////////////////////////////// [ui] # ------------- # to switch to european date format, use these values instead SEARCH_TERM_TIME_FORMAT = %d/%m/%Y:%H:%M:%S SEARCH_RESULTS_TIME_FORMAT = %d/%m/%Y %H:%M:%S # ------------- PRO_SERVER_LOGIN_HEADER = Login to Splunk (guest/guest) INSUFFICIENT_DISK_SPACE_ERROR = The server's free disk space is too low. Indexing will temporarily pause until more disk space becomes available. SERVER_RESTART_MESSAGE_ADMIN = You need to restart the Splunk Server for your changes to take effect. <span class="divider">|</span> To restart, go to the <a href="/admin/settings/control">Server > Control</a> screen. SERVER_RESTART_MESSAGE = This Splunk Server's configuration has been changed. The server needs to be restarted by an administrator. UNABLE_TO_CONNECT_MESSAGE = Could not connect to splunkd at %s.
This documentation applies to the following versions of Splunk: 3.2 , 3.2.1 , 3.2.2 , 3.2.3 , 3.2.4 , 3.2.5 , 3.2.6 View the Article History for its revisions.