https://community.splunk.com/t5/Getting-Data-In/Is-there-a-way-to-set-all-fields-using-eval-in-Props-conf/m-p/585680#M103024 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/237764">@noott211</a>,</P><P>the easiest approach is to do all the field extractions or calculation by GUI in the destination app, so you don't need to modify conf files (and restart Splunk).</P><P>If you want to use conf files, you can write your evals in props, but it less easy.</P><P>Why do you want to do this?</P><P>Ciao.</P><P>Giuseppe</P> Fri, 18 Feb 2022 08:57:42 GMT gcusello 2022-02-18T08:57:42Z https://community.splunk.com/t5/Getting-Data-In/Is-there-a-way-to-set-all-fields-using-eval-in-Props-conf/m-p/585676#M103023 <P>Props.conf</P> <P>[mysourcetype]</P> <P>EVAL-field1=trim(field1)</P> <P><BR />Field1 must contain all fields for that source type.</P> <P>Is there a way?</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 18 Feb 2022 16:06:34 GMT https://community.splunk.com/t5/Getting-Data-In/Is-there-a-way-to-set-all-fields-using-eval-in-Props-conf/m-p/585676#M103023 noott211 2022-02-18T16:06:34Z https://community.splunk.com/t5/Getting-Data-In/Is-there-a-way-to-set-all-fields-using-eval-in-Props-conf/m-p/585680#M103024 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/237764">@noott211</a>,</P><P>the easiest approach is to do all the field extractions or calculation by GUI in the destination app, so you don't need to modify conf files (and restart Splunk).</P><P>If you want to use conf files, you can write your evals in props, but it less easy.</P><P>Why do you want to do this?</P><P>Ciao.</P><P>Giuseppe</P> Fri, 18 Feb 2022 08:57:42 GMT https://community.splunk.com/t5/Getting-Data-In/Is-there-a-way-to-set-all-fields-using-eval-in-Props-conf/m-p/585680#M103024 gcusello 2022-02-18T08:57:42Z