Propinator

Propinator is an app from Discovered Intelligence that suggests opinionated Splunk parsing configurations for unstructured events. The app provides a unique functionality - a dashboardthat lets you select events associated with a specific index and sourcetype and generates the Great Eight props.conf stanza applicable at inputs and parsing phases in the forwarding and indexing tier. It also lets a user test and validate the generated attribute values by showing a preview of how it would look like after applying those generated attributes. Users also have the flexibility to edit the attribute values and then apply those edited values to the raw events to preview and test them. Once satisfied with the values, the stanza is shown in a panel exactly as how it would appear in the configuration file so you can copy it to a clipboard using the Copy to Clipboard button and manually paste it in the props.conf of the appropriate tier.