Getting Data In

When does the ANNOTATE_PUNCT props.conf setting apply? At input-time or index-time?

Explorer

According to Splunk's documentation for props.conf, the ANNOTATE_PUNCT setting "Determines whether to index a special token starting with "punct::" ".

Does this setting get applied at input-time or index-time?

0 Karma
1 Solution

SplunkTrust
SplunkTrust

That's index-time.

See http://wiki.splunk.com/Community:HowIndexingWorks - happens in the annotator processor within the typingQueue.

View solution in original post

SplunkTrust
SplunkTrust

That's index-time.

See http://wiki.splunk.com/Community:HowIndexingWorks - happens in the annotator processor within the typingQueue.

View solution in original post