Hi Krusty, I followed your recommended solution but it doesn't seem to work in my case. Logs seem to indicate the configured transforms are processed as expected, bu the 2nd line still shows up on the cucm index search. inputs.conf [monitor://C:\FTP] disabled = false index = cucm sourcetype = csv recursive = false followTail = 0 followSymlink = false crcSalt = transforms.conf [source::...\cdr_*] TRANSFORMS-cdr_discard = eliminate_line_cdr [source::...\cmr_*] TRANSFORMS-cmr_discard = eliminate_line_cdr props.conf [source::...\cdr_*] TRANSFORMS-cdr_discard = eliminate_line_cdr [source::...\cmr_*] TRANSFORMS-cmr_discard = eliminate_line_cdr splunkd.log 03-24-2017 11:11:06.206 +1000 DEBUG PropertiesMapConfig - Performing pattern matching for: source::C:\FTP\cmr_StandAloneCluster_01_201703240110_466484|host::AU-BNE-SVR-SPK01|csv|2884 03-24-2017 11:11:06.206 +1000 DEBUG PropertiesMapConfig - Pattern 'source::...\cmr_' matches with lowest priority 03-24-2017 11:11:06.206 +1000 DEBUG PropertiesMapConfig - Pattern 'csv' matches with priority 100 03-24-2017 11:11:06.206 +1000 DEBUG PropertiesMapConfig - Performing pattern matching for: source::C:\FTP\cmr_StandAloneCluster_01_201703240110_466484|host::AU-BNE-SVR-SPK01|csv|2884 03-24-2017 11:11:06.207 +1000 DEBUG PropertiesMapConfig - Pattern 'source::...\cmr_' matches with lowest priority 03-24-2017 11:11:06.207 +1000 DEBUG PropertiesMapConfig - Pattern 'csv' matches with priority 100 03-24-2017 11:11:06.207 +1000 DEBUG regexExtractionProcessor - RegexExtractor: Instance found for eliminate_line_cdr 03-24-2017 11:11:06.207 +1000 DEBUG regexExtractionProcessor - RegexExtractor: Interpolated to nullQueue 03-24-2017 11:11:06.207 +1000 DEBUG regexExtractionProcessor - RegexExtractor: Extracted nullQueue ... View more