topic Re: How to create a new field with static value during index time in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-with-static-value-during-index-time/m-p/481172#M82474 <P>worked directly adding on inputs.conf. </P> <P>[script://path/your_script.py]<BR /> _meta = script_name::abc.py</P> Wed, 30 Sep 2020 05:04:58 GMT DataOrg 2020-09-30T05:04:58Z How to create a new field with static value during index time https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-with-static-value-during-index-time/m-p/481169#M82471 <P>I want to append new field with static value to the data during index time.</P> <P>how to create with props.conf/transform.conf and no field extraction is required</P> Tue, 21 Apr 2020 11:02:37 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-with-static-value-during-index-time/m-p/481169#M82471 DataOrg 2020-04-21T11:02:37Z Re: How to create a new field with static value during index time https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-with-static-value-during-index-time/m-p/481170#M82472 <P>why do you need to do this? what is the use case?<BR /> if you need that data all the time ... you can add <CODE>... | eval NEW_FIELD = "YOUR STATIC VALUE" ...</CODE></P> Tue, 21 Apr 2020 12:11:10 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-with-static-value-during-index-time/m-p/481170#M82472 adonio 2020-04-21T12:11:10Z Re: How to create a new field with static value during index time https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-with-static-value-during-index-time/m-p/481171#M82473 <P>You can use <CODE>INGEST_EVAL = foo="bar"</CODE> in transforms.conf.</P> Tue, 21 Apr 2020 12:20:03 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-with-static-value-during-index-time/m-p/481171#M82473 richgalloway 2020-04-21T12:20:03Z Re: How to create a new field with static value during index time https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-with-static-value-during-index-time/m-p/481172#M82474 <P>worked directly adding on inputs.conf. </P> <P>[script://path/your_script.py]<BR /> _meta = script_name::abc.py</P> Wed, 30 Sep 2020 05:04:58 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-with-static-value-during-index-time/m-p/481172#M82474 DataOrg 2020-09-30T05:04:58Z