Getting Data In

When does the ANNOTATE_PUNCT props.conf setting apply? At input-time or index-time?

mthierbel
Explorer

According to Splunk's documentation for props.conf, the ANNOTATE_PUNCT setting "Determines whether to index a special token starting with "punct::" ".

Does this setting get applied at input-time or index-time?

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

That's index-time.

See http://wiki.splunk.com/Community:HowIndexingWorks - happens in the annotator processor within the typingQueue.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

That's index-time.

See http://wiki.splunk.com/Community:HowIndexingWorks - happens in the annotator processor within the typingQueue.

View solution in original post

.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!