Modify files directly

For certain situations, you might want to modify your add-on outside of the Add-on Builder by modifying files directly. Follow these guidelines for best results:

• When modifying configuration files, for example to add stanzas, modify the version in the $SPLUNK_HOME/etc/apps/your_addon/default directory.
• If you need to add a configuration file, add the file to the $SPLUNK_HOME/etc/apps/your_addon/default directory.
• Make sure you have sufficient access permissions to any files you place in your add-on directory.
• Do not place files in the /local directory. Although the Add-on Builder creates copies of the configuration files for your add-ons in its /local directory, this is a working location and files can be overwritten. When packaging an add-on, the Add-on Builder merges any files from your add-on's /default directory with its working copy.

Advanced modifications might affect the add-on's eligibility for Splunk App Certification.

Learn more

For more information, see the following Splunk Enterprise documentation:

• About configuration files
• Configuration file precedence