https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448549#M127085 <P>FrankVI's suggestion would be the way to go. If you work at a Splunk customer, you are able to request a 6-month, personalized dev/test license (50GB). It has limitations (single server, one user, etc...), but is great for testing props, transforms, etc... before you start playing around with your production environment.</P> <P><A href="https://www.splunk.com/blog/2016/11/02/devtest-licenses.html">https://www.splunk.com/blog/2016/11/02/devtest-licenses.html</A></P> <P>At the end of the 6 months, you can request another license. When making the request, make sure you use a splunk.com user that is attached to your company email.</P> Tue, 25 Jun 2019 14:03:39 GMT kmorris_splunk 2019-06-25T14:03:39Z https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448546#M127082 <P>In Splunk when we add data via uploading file it gives UI to add and verify props.conf properties there, like timestamp extraction. This functionality is very useful while developing Add-on. (see below image)<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7262iEEC81AD7FC24B6F8/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>I'm looking for functionality (may be via some other App) that can also give functionality to verify transforms.conf parameters also. Optionally if possible for tags.conf, eventtypes.conf parameters.</P> <P>This functionality is very useful for a Splunk App developer as sometimes we don't have access to back-end.</P> Tue, 25 Jun 2019 13:32:24 GMT https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448546#M127082 VatsalJagani 2019-06-25T13:32:24Z https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448547#M127083 <P>I'm not aware of such features, but perhaps there is some app for that.</P> <P>Typically you'd do this by onboarding (sample) data to a non-PROD Splunk instance first, where you would have full control as a developer.</P> Tue, 25 Jun 2019 13:39:56 GMT https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448547#M127083 FrankVl 2019-06-25T13:39:56Z https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448548#M127084 <P>Yeah, Agree with you but still if this feature is there direct on the UI then I would be able to write all configuration at comparatively flash speed.</P> Tue, 25 Jun 2019 14:03:01 GMT https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448548#M127084 VatsalJagani 2019-06-25T14:03:01Z https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448549#M127085 <P>FrankVI's suggestion would be the way to go. If you work at a Splunk customer, you are able to request a 6-month, personalized dev/test license (50GB). It has limitations (single server, one user, etc...), but is great for testing props, transforms, etc... before you start playing around with your production environment.</P> <P><A href="https://www.splunk.com/blog/2016/11/02/devtest-licenses.html">https://www.splunk.com/blog/2016/11/02/devtest-licenses.html</A></P> <P>At the end of the 6 months, you can request another license. When making the request, make sure you use a splunk.com user that is attached to your company email.</P> Tue, 25 Jun 2019 14:03:39 GMT https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448549#M127085 kmorris_splunk 2019-06-25T14:03:39Z https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448550#M127086 <P>The issue is not related to licence, I even don't want to index the events. I just want to write props and transforms for sample events. </P> Tue, 25 Jun 2019 14:10:41 GMT https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448550#M127086 VatsalJagani 2019-06-25T14:10:41Z https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448551#M127087 <P>look for this beta program:<BR /> <A href="https://www.splunk.com/en_us/software/splunk-next/splunk-data-stream-processor.html">https://www.splunk.com/en_us/software/splunk-next/splunk-data-stream-processor.html</A></P> <P>also, there is a product that does what you are looking for ...<BR /> will not advertise it here, but if you will look carefully, you can use your favorite search engine to find it</P> <P>hope it helps</P> Tue, 25 Jun 2019 14:29:10 GMT https://community.splunk.com/t5/Splunk-Search/Test-props-and-transforms-from-Splunk-UI/m-p/448551#M127087 adonio 2019-06-25T14:29:10Z