Something's up with the batch processor. I send the following file to a sink and it doesn't set any of the metadata fields as it used to previously.
Also documented at http://www.splunk.com/base/Documentation/latest/Data/Assignmetadatatoeventsdynamically
dummy.log
***SPLUNK*** host=something source=keyboard sourcetype=text
this is an event!
Subsequent processing of props and transforms don't event happen.
The event get's indexed as if I never specified the header.
Fails on a fresh Splunk 4.2.2 (build 101277) on Windows 7 64bit but works Splunk 4.1.7 (build 95063).
PS I noticed another post with a similar problem
http://splunk-base.splunk.com/answers/9110/batch-input-doesnt-honor-line_breaker-settings
