https://community.splunk.com/t5/Getting-Data-In/too-Small-Sourcetype/m-p/70226#M14287 <P>What would cause a file being indexed to have a sourcetype of SOAMetrics-too_small ? </P> <P>I am not assigning that sourcetype. </P> Thu, 21 Mar 2013 17:30:53 GMT peter_gianusso 2013-03-21T17:30:53Z https://community.splunk.com/t5/Getting-Data-In/too-Small-Sourcetype/m-p/70226#M14287 <P>What would cause a file being indexed to have a sourcetype of SOAMetrics-too_small ? </P> <P>I am not assigning that sourcetype. </P> Thu, 21 Mar 2013 17:30:53 GMT https://community.splunk.com/t5/Getting-Data-In/too-Small-Sourcetype/m-p/70226#M14287 peter_gianusso 2013-03-21T17:30:53Z https://community.splunk.com/t5/Getting-Data-In/too-Small-Sourcetype/m-p/70227#M14288 <P>this answers the question</P> <P><A href="http://splunk-base.splunk.com/answers/4661/why-is-my-sourcetype-auto-classified-as-too_small">http://splunk-base.splunk.com/answers/4661/why-is-my-sourcetype-auto-classified-as-too_small</A></P> Thu, 21 Mar 2013 17:39:45 GMT https://community.splunk.com/t5/Getting-Data-In/too-Small-Sourcetype/m-p/70227#M14288 peter_gianusso 2013-03-21T17:39:45Z