Splunk Comments

Lines that begin with a hash symbol (#) identify comments in the audit file. The Splunk plugin ignores any commented lines.

The one exception for commented lines is the ui_metadata block at the beginning of Tenable-published audit files. This block is an XML structure of metadata that was originally only read by Nessus to construct elements in its user interface, but is now used by the plugins to configure audit file metadata and variables.