https://community.splunk.com/t5/Getting-Data-In/Renaming-fields-in-transforms-conf/m-p/22411#M3443 <P>No impact. The fields applied to all the data that was previously indexed. Thanks sdaniels.</P> Wed, 13 Feb 2013 22:22:18 GMT adrianathome 2013-02-13T22:22:18Z https://community.splunk.com/t5/Getting-Data-In/Renaming-fields-in-transforms-conf/m-p/22409#M3441 <P>Hello,<BR /> I was wondering what would be the impact of renaming fields that have been defined in transforms.conf. More specifically, what happens to data that has already been indexed with the old field names.</P> <P>Thanks!</P> Wed, 06 Feb 2013 23:22:12 GMT https://community.splunk.com/t5/Getting-Data-In/Renaming-fields-in-transforms-conf/m-p/22409#M3441 adrianathome 2013-02-06T23:22:12Z https://community.splunk.com/t5/Getting-Data-In/Renaming-fields-in-transforms-conf/m-p/22410#M3442 <P>Are you just renaming some fields where you were using DELIMS or something like that? Splunk allows you to do this at search time so if you change the name, restart Splunk, it will be applied to all of the historical data as well as new data coming in. Keep in mind this could affect any saved searches that already use a particular field name.</P> Thu, 07 Feb 2013 13:07:32 GMT https://community.splunk.com/t5/Getting-Data-In/Renaming-fields-in-transforms-conf/m-p/22410#M3442 sdaniels 2013-02-07T13:07:32Z https://community.splunk.com/t5/Getting-Data-In/Renaming-fields-in-transforms-conf/m-p/22411#M3443 <P>No impact. The fields applied to all the data that was previously indexed. Thanks sdaniels.</P> Wed, 13 Feb 2013 22:22:18 GMT https://community.splunk.com/t5/Getting-Data-In/Renaming-fields-in-transforms-conf/m-p/22411#M3443 adrianathome 2013-02-13T22:22:18Z