This chapter provided an overview of how configurations work and a commentary on the most common aspects of Splunk configuration. This is by no means a complete reference for these configurations, which I will leave to the official documentation. I find that the easiest way to get to the official documentation for a particular file is to query your favorite search engine for splunk configname.conf. In Chapter 12, Advanced Deployments, we will dig into distributed deployments and look at how they are efficiently configured. What you have learned in this chapter will be vital to understanding what is considered to be a best practice.