This IF is NOT a heavy forwarder. It is only a light forwarder and does not do any indexing. I added "force_local_processing=true" to my props.conf and I am finally making progress!! Now the logs that originate from the IF are tagging with the IntermediateForwarder,GUIDe, Project_ID and the debug1 This is exactly as expected now that the force_local_processing is forcing it to actually use the props and transforms. (it also has debug1=debugonIF) Oddly the logs that the IF is forwarding are still NOT tagged with IntermediateForwarder and debug1 tags that I expect them to be. The logs do have the GUIDe, Project_ID tags since that it configured on the UF clients. These are my latest configs. == props.conf == [default] TRANSFORMS-setCustomMetadata=setCustomMetadata force_local_processing=true [host:: <IFhostname>] TRANSFORMS-setCustomMetadata=setThisHostMetadata == transforms.conf == [setCustomMetadata] INGEST_EVAL = IntermediateForwarder:=COALESCE(IntermediateForwarder," <IFhostname>"), debug1:=COALESCE(debug1,"testdebug") [setThisHostMetadata] INGEST_EVAL = = IntermediateForwarder:=COALESCE(IntermediateForwarder," <IFhostname>"), GUIDe:=COALESCE(GUIDe,"123456"), Project_ID:=COALESCE(ProjectID,"54321"), debug1:=COALESCE(debug1,"debugonIF")
... View more