# [monitor://$SPLUNK_HOME/var/log/splunk/config_explorer.log] # index = _internal # sourcetype = config_explorer