topic Re: How to set default values for new sourcetypes? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-set-default-values-for-new-sourcetypes/m-p/261046#M50077 <P>Does all of your sourcetypes follow a specific naming convention? If so, can you wild card them so that you have just one stanza? </P> <P>Look at this thread<BR /> <A href="https://answers.splunk.com/answers/8505/is-it-possible-to-use-wildcards-in-sourcetype-props-conf-stanzas.html">https://answers.splunk.com/answers/8505/is-it-possible-to-use-wildcards-in-sourcetype-props-conf-stanzas.html</A></P> Mon, 23 May 2016 14:33:54 GMT pradeepkumarg 2016-05-23T14:33:54Z How to set default values for new sourcetypes? https://community.splunk.com/t5/Getting-Data-In/How-to-set-default-values-for-new-sourcetypes/m-p/261045#M50076 <P>How can I set up several sourcetypes to inherit the values from one place so I don't have to edit 10 different ones that all have the same basic framework?</P> Mon, 23 May 2016 13:24:28 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-set-default-values-for-new-sourcetypes/m-p/261045#M50076 dougmartin 2016-05-23T13:24:28Z Re: How to set default values for new sourcetypes? https://community.splunk.com/t5/Getting-Data-In/How-to-set-default-values-for-new-sourcetypes/m-p/261046#M50077 <P>Does all of your sourcetypes follow a specific naming convention? If so, can you wild card them so that you have just one stanza? </P> <P>Look at this thread<BR /> <A href="https://answers.splunk.com/answers/8505/is-it-possible-to-use-wildcards-in-sourcetype-props-conf-stanzas.html">https://answers.splunk.com/answers/8505/is-it-possible-to-use-wildcards-in-sourcetype-props-conf-stanzas.html</A></P> Mon, 23 May 2016 14:33:54 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-set-default-values-for-new-sourcetypes/m-p/261046#M50077 pradeepkumarg 2016-05-23T14:33:54Z Re: How to set default values for new sourcetypes? https://community.splunk.com/t5/Getting-Data-In/How-to-set-default-values-for-new-sourcetypes/m-p/261047#M50078 <P>that's a perfectly acceptable answer, converted to answer.</P> Mon, 23 May 2016 20:14:51 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-set-default-values-for-new-sourcetypes/m-p/261047#M50078 jkat54 2016-05-23T20:14:51Z