External command configured automatic

[rdownie]

I wrote an external command to just adjust the timezone and reformat _time and return a new field. It is a very simple python script. I want it to run automatically against a specific sourcetype. I can see you can do it with an external lookup or a lookup. Can I have this run for an external command? I have tried to do it but it does not appear to work. If I put the command inline in the search, it works fine.
Any help would be appreciated.
-Bob

[jplumsdaine22]

Have a look at the external_cmd configuration in transforms.conf http://docs.splunk.com/Documentation/Splunk/latest/Admin/Transformsconf