I am trying to find any documentation on exactly which props & transforms can be set on indexer vs search time.
I know a few must be set at index (or from forwarder) time such as host, index, source, sourcetype. however what other parts can/should.
linebreak?
timezone?
I had documented from PS in the past, however can no longer find it.
