https://community.splunk.com/t5/Getting-Data-In/Extracting-sourcetype-from-source-tmp-csv-file1/m-p/287698#M54968 <P>We dont have this ability now in Splunk. However, you can further filter the sourcetype by source via transforms and searching a regex against the meta data. This article has a good example -</P> <P><A href="https://answers.splunk.com/answers/112471/changing-sourcetype-with-regex.html">https://answers.splunk.com/answers/112471/changing-sourcetype-with-regex.html</A></P> Sat, 24 Oct 2015 15:48:32 GMT esix_splunk 2015-10-24T15:48:32Z https://community.splunk.com/t5/Getting-Data-In/Extracting-sourcetype-from-source-tmp-csv-file1/m-p/287697#M54967 <P>The sourcetype should be csv or tsv or psv, depending on the full path in the source field. For hosts we have host_regex and host_segment. Do we have sourcetype_regex or sourcetype_segment? Thx.</P> <P>/tmp/csv/file1<BR /> /tmp/csv/file2<BR /> /tmp/tsv/file3<BR /> /tmp/tsv/file4<BR /> /tmp/psv/file5<BR /> /tmp/psv/file6</P> Tue, 29 Sep 2020 07:40:12 GMT https://community.splunk.com/t5/Getting-Data-In/Extracting-sourcetype-from-source-tmp-csv-file1/m-p/287697#M54967 hylam 2020-09-29T07:40:12Z https://community.splunk.com/t5/Getting-Data-In/Extracting-sourcetype-from-source-tmp-csv-file1/m-p/287698#M54968 <P>We dont have this ability now in Splunk. However, you can further filter the sourcetype by source via transforms and searching a regex against the meta data. This article has a good example -</P> <P><A href="https://answers.splunk.com/answers/112471/changing-sourcetype-with-regex.html">https://answers.splunk.com/answers/112471/changing-sourcetype-with-regex.html</A></P> Sat, 24 Oct 2015 15:48:32 GMT https://community.splunk.com/t5/Getting-Data-In/Extracting-sourcetype-from-source-tmp-csv-file1/m-p/287698#M54968 esix_splunk 2015-10-24T15:48:32Z