<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic fields via transforms... in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/fields-via-transforms/m-p/161089#M32650</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;I've created some fields via transforms, and they work fine in the search app. However, they do not appear in any other app.  I put the transforms in the ../etc/system/local transforms, and assumed that would guarantee that the fields would appear everywhere.  Is there a way to get them to appear everywhere? &lt;/P&gt;</description>
    <pubDate>Sun, 01 Dec 2013 14:20:23 GMT</pubDate>
    <dc:creator>a212830</dc:creator>
    <dc:date>2013-12-01T14:20:23Z</dc:date>
    <item>
      <title>fields via transforms...</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/fields-via-transforms/m-p/161089#M32650</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;I've created some fields via transforms, and they work fine in the search app. However, they do not appear in any other app.  I put the transforms in the ../etc/system/local transforms, and assumed that would guarantee that the fields would appear everywhere.  Is there a way to get them to appear everywhere? &lt;/P&gt;</description>
      <pubDate>Sun, 01 Dec 2013 14:20:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/fields-via-transforms/m-p/161089#M32650</guid>
      <dc:creator>a212830</dc:creator>
      <dc:date>2013-12-01T14:20:23Z</dc:date>
    </item>
    <item>
      <title>Re: fields via transforms...</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/fields-via-transforms/m-p/161090#M32651</link>
      <description>&lt;P&gt;Yes, if transforms.conf is placed in &lt;CODE&gt;etc/system/local/&lt;/CODE&gt; it will be available to all users. If you leave it in the search app you need to make sure that it is exported properly to all other apps. Look into the &lt;CODE&gt;.meta&lt;/CODE&gt; file documentation for more details: &lt;A href="http://docs.splunk.com/Documentation/Splunk/6.0/admin/Defaultmetaconf"&gt;http://docs.splunk.com/Documentation/Splunk/6.0/admin/Defaultmetaconf&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Sun, 01 Dec 2013 14:57:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/fields-via-transforms/m-p/161090#M32651</guid>
      <dc:creator>_d_</dc:creator>
      <dc:date>2013-12-01T14:57:35Z</dc:date>
    </item>
  </channel>
</rss>

