Encoding for forwarded data

[andrey2007]

I have files in CP866 encoding. For indexing them in Splunk i made _russian-CP866.ngram file and changed props.conf this way
[host::]
CHARSET=russian-CP866
What should i do for indexing files in CP866 encoding, which are forwarded by universalforwarder from remote host?

[gkanapathy]

CHARSET must be specified on the input, i.e., that config must be on the Universal Forwarder.

[andrey2007]

Where can i do it? In Universal Forwarder there is no ngrams-model folder.