Which feature in Splunk allows Event Breaking, Timestamp extractions, and any advanced configurations found in props.conf to be validated all through the UI?

Apps are packages of configurations, dashboards, and saved searches deployed to Splunk instances, not an interactive validation tool for props.conf settings.

Search is used to query and analyze already-indexed data and does not provide a mechanism to preview or validate raw data ingestion configurations.

Data preview allows an administrator to upload or select sample data and see in real time how Splunk applies event breaking rules, timestamp extraction patterns, and other props.conf configurations; changes can be tested and refined through the UI, validating the configuration without writing events to an index or modifying production settings.

Forwarder inputs is a management interface for configuring data collection from Universal Forwarders, not a tool for validating props.conf parsing behavior.