https://community.splunk.com/t5/Getting-Data-In/How-does-Splunk-find-sourcetypes/m-p/28703#M4929 <P>should there be an inputs.conf in the default or local directories of Splunk for Blue Coat?</P> Tue, 12 Feb 2013 18:12:17 GMT aapittts 2013-02-12T18:12:17Z https://community.splunk.com/t5/Getting-Data-In/How-does-Splunk-find-sourcetypes/m-p/28701#M4927 <P>I have several instances of SplunkforBlueCoat and have recently run into a strange issue. Splunk cannot find the BlueCoat sourcetype. I haven't had this issue before and I've checked my props.conf &amp; transforms.conf with correct ones and cannot find any differences. Can anyone point me in the right direction?</P> Tue, 12 Feb 2013 15:33:10 GMT https://community.splunk.com/t5/Getting-Data-In/How-does-Splunk-find-sourcetypes/m-p/28701#M4927 aapittts 2013-02-12T15:33:10Z https://community.splunk.com/t5/Getting-Data-In/How-does-Splunk-find-sourcetypes/m-p/28702#M4928 <P>check the inputs.conf, this is where you specify which sourcetype to apply to which source.</P> Tue, 12 Feb 2013 17:44:10 GMT https://community.splunk.com/t5/Getting-Data-In/How-does-Splunk-find-sourcetypes/m-p/28702#M4928 yannK 2013-02-12T17:44:10Z https://community.splunk.com/t5/Getting-Data-In/How-does-Splunk-find-sourcetypes/m-p/28703#M4929 <P>should there be an inputs.conf in the default or local directories of Splunk for Blue Coat?</P> Tue, 12 Feb 2013 18:12:17 GMT https://community.splunk.com/t5/Getting-Data-In/How-does-Splunk-find-sourcetypes/m-p/28703#M4929 aapittts 2013-02-12T18:12:17Z https://community.splunk.com/t5/Getting-Data-In/How-does-Splunk-find-sourcetypes/m-p/28704#M4930 <P>I'm not seeing where in the inputs.conf the source type is defined.</P> Tue, 12 Feb 2013 18:49:14 GMT https://community.splunk.com/t5/Getting-Data-In/How-does-Splunk-find-sourcetypes/m-p/28704#M4930 aapittts 2013-02-12T18:49:14Z