I apply the change to its peers using CLI command apply cluster-bundle and I can see the new sourcetype is available on its peers. However, the fields in transforms.conf are not effective.
To veryify this transforms.conf is valid, I manually copy both config files to each peer /etc/system/local/ and it's working as expected.
Can any one shed some light on why transforms.conf is not working when pushed from the master node?
Thanks in advance!
Data Archival-Clustered environment 1 Answer