<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic is it safe for app-developers to use pulldown_type=true on their sourcetypes in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/is-it-safe-for-app-developers-to-use-pulldown-type-true-on-their/m-p/52067#M10000</link>
    <description>&lt;P&gt;props.conf has a boolean setting called "pulldown_type".&lt;BR /&gt;&lt;BR /&gt;
If you set it to true, then the name of your sourcetype will appear in the end-users' sourcetype dropdowns in manager. &lt;BR /&gt;
For app developers, who are often defining their own custom sourcetypes as a part of their shipping app,  this key is obviously quite nice for their end users. &lt;/P&gt;

&lt;P&gt;In the documentation however, pulldown_type is listed under "internal fields", with a note saying "Not yours - do not set".    &lt;/P&gt;

&lt;P&gt;My question is -- is there some hidden pitfall to setting that key?  Is that warning really warranted?  If not I'm going to start setting it to true in all my apps that define one or more custom sourcetypes. &lt;/P&gt;</description>
    <pubDate>Mon, 16 Jan 2012 19:04:34 GMT</pubDate>
    <dc:creator>sideview</dc:creator>
    <dc:date>2012-01-16T19:04:34Z</dc:date>
    <item>
      <title>is it safe for app-developers to use pulldown_type=true on their sourcetypes</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/is-it-safe-for-app-developers-to-use-pulldown-type-true-on-their/m-p/52067#M10000</link>
      <description>&lt;P&gt;props.conf has a boolean setting called "pulldown_type".&lt;BR /&gt;&lt;BR /&gt;
If you set it to true, then the name of your sourcetype will appear in the end-users' sourcetype dropdowns in manager. &lt;BR /&gt;
For app developers, who are often defining their own custom sourcetypes as a part of their shipping app,  this key is obviously quite nice for their end users. &lt;/P&gt;

&lt;P&gt;In the documentation however, pulldown_type is listed under "internal fields", with a note saying "Not yours - do not set".    &lt;/P&gt;

&lt;P&gt;My question is -- is there some hidden pitfall to setting that key?  Is that warning really warranted?  If not I'm going to start setting it to true in all my apps that define one or more custom sourcetypes. &lt;/P&gt;</description>
      <pubDate>Mon, 16 Jan 2012 19:04:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/is-it-safe-for-app-developers-to-use-pulldown-type-true-on-their/m-p/52067#M10000</guid>
      <dc:creator>sideview</dc:creator>
      <dc:date>2012-01-16T19:04:34Z</dc:date>
    </item>
    <item>
      <title>Re: is it safe for app-developers to use pulldown_type=true on their sourcetypes</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/is-it-safe-for-app-developers-to-use-pulldown-type-true-on-their/m-p/52068#M10001</link>
      <description>&lt;P&gt;Interestingly enough, Splunk 4.3 sets this value when creating new sourcetypes as part of the initial setup 'Add data' screens and choosing "Set a new sourcetype".  Certainly that would seem to imply that the warning isn't warranted, but it would be nice to see confirmation and some insight into the original reason for the warning.&lt;/P&gt;</description>
      <pubDate>Tue, 17 Jan 2012 04:24:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/is-it-safe-for-app-developers-to-use-pulldown-type-true-on-their/m-p/52068#M10001</guid>
      <dc:creator>southeringtonp</dc:creator>
      <dc:date>2012-01-17T04:24:47Z</dc:date>
    </item>
    <item>
      <title>Re: is it safe for app-developers to use pulldown_type=true on their sourcetypes</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/is-it-safe-for-app-developers-to-use-pulldown-type-true-on-their/m-p/52069#M10002</link>
      <description>&lt;P&gt;I'd set it to true, and also set the new &lt;CODE&gt;description&lt;/CODE&gt; and &lt;CODE&gt;category&lt;/CODE&gt; fields.&lt;/P&gt;</description>
      <pubDate>Fri, 27 Feb 2015 10:43:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/is-it-safe-for-app-developers-to-use-pulldown-type-true-on-their/m-p/52069#M10002</guid>
      <dc:creator>dart</dc:creator>
      <dc:date>2015-02-27T10:43:47Z</dc:date>
    </item>
  </channel>
</rss>

