I wrote an external command to just adjust the timezone and reformat _time and return a new field. It is a very simple python script. I want it to run automatically against a specific sourcetype. I can see you can do it with an external lookup or a lookup. Can I have this run for an external command? I have tried to do it but it does not appear to work. If I put the command inline in the search, it works fine.
Any help would be appreciated.
-Bob
