When does the ANNOTATE_PUNCT props.conf setting apply? At input-time or index-time?

[mthierbel]

According to Splunk's documentation for props.conf, the ANNOTATE_PUNCT setting "Determines whether to index a special token starting with "punct::" ".

Does this setting get applied at input-time or index-time?

[martin_mueller · Accepted solution]

That's index-time.

See http://wiki.splunk.com/Community:HowIndexingWorks - happens in the annotator processor within the typingQueue.