Ksconf Splunk CONFiguration tool

Ksconf logo

Lowell Alleman (Kintyre)



Welcome to KSCONF!

KSCONF is a modular command line tool for Splunk admins and app developers. It’s quick and easy to get started with basic commands and grow into the more advanced commands as needed. Thank you for reviewing our expanding body of documentation to help smooth your transition to a more well-managed Splunk environment and explore ways to integrate Ksconf capabilities into your existing workflow.

We are glad you are here! No matter where you’re starting from, Ksconf can help. Let us know if there is anything we can do to help along your journey.

– Kintyre, a CDI Company


Ksconf can be directly installed as a Python (via pip) or as a Splunk app. The Splunk app option is often easier.

To install as a python package, run the following:

pip install ksconf

To install the Splunk app, download the latest KSCONF App for Splunk release. Note that a one-time registration command is needed to make ksconf executable:

splunk cmd python3 $SPLUNK_HOME/etc/apps/ksconf/bin/install.py

User Guide

Indices and tables