How to customize nullqueue and indexqueue filtering with new patterns over time?

[meenal901]

Hi,
I have a scenario like this: I want to filter data using NullQueue and IndexQueue. I also have the patterns with me. But there is a high possibility that the new patterns may be added to this list for filtering. Now if I put it in indexer (props.conf+transforms.conf), won't I have to re-index complete data everytime? Is there an alternate solution? How does this work in Heavy Forwarder?

Thanks,
Meenal

[strive · Accepted solution]

The old data that was indexed already cannot be changed. The new patterns will be applied to any new data that is coming in.

[meenal901]

Okay, thanks Strive.