https://community.splunk.com/t5/Getting-Data-In/index-time-props-vs-search-time-props/m-p/147132#M29968 <P>I am trying to find any documentation on exactly which props &amp; transforms can be set on indexer vs search time.</P> <P>I know a few must be set at index (or from forwarder) time such as host, index, source, sourcetype. however what other parts can/should.</P> <P>linebreak?<BR /> timezone?</P> <P>I had documented from PS in the past, however can no longer find it.</P> Mon, 08 Dec 2014 19:25:38 GMT GeorgeStarkey 2014-12-08T19:25:38Z https://community.splunk.com/t5/Getting-Data-In/index-time-props-vs-search-time-props/m-p/147132#M29968 <P>I am trying to find any documentation on exactly which props &amp; transforms can be set on indexer vs search time.</P> <P>I know a few must be set at index (or from forwarder) time such as host, index, source, sourcetype. however what other parts can/should.</P> <P>linebreak?<BR /> timezone?</P> <P>I had documented from PS in the past, however can no longer find it.</P> Mon, 08 Dec 2014 19:25:38 GMT https://community.splunk.com/t5/Getting-Data-In/index-time-props-vs-search-time-props/m-p/147132#M29968 GeorgeStarkey 2014-12-08T19:25:38Z https://community.splunk.com/t5/Getting-Data-In/index-time-props-vs-search-time-props/m-p/147133#M29969 <P>This should prove useful: <A href="http://wiki.splunk.com/Where_do_I_configure_my_Splunk_settings%3F">http://wiki.splunk.com/Where_do_I_configure_my_Splunk_settings%3F</A></P> Mon, 08 Dec 2014 19:36:54 GMT https://community.splunk.com/t5/Getting-Data-In/index-time-props-vs-search-time-props/m-p/147133#M29969 Ayn 2014-12-08T19:36:54Z