In outputs.conf you can configure compressed = <boolean> to compress the data, but the documentation doesn't specify how the compression is done。   There is also no parameter specifying the compression method.   So my question is what compression is used by default, and whether there is any documentation on it to show that ... View more

When using HF to collect logs on the cloud， Because the add-on used cannot set host， So the host of the data is the name of HF， but it needs to reflect that the data comes from an impassable environment， And the same data type uses the same sourcetype. At present, the way I use is First, use different sourcetypes to access data  At this time, they have the same host （HF name） then, I use props and transforms to modify their host and Change their sourcetype to the same one the question is modify host and change sourcetype  Only one will take effect. Is there a way to modify the host first and then modify the sourcetype？ Or something better ？ ... View more