https://community.splunk.com/t5/Getting-Data-In/Not-allowing-to-change-sourcetype-for-UDP/m-p/51868#M9947 <P>I have UDP 514 input data configured for syslog but somehow if i select sourcetype From list : syslog and save </P> <P>it automatically revert back to "Manual" syslog </P> Tue, 01 Mar 2011 23:27:28 GMT satishp 2011-03-01T23:27:28Z https://community.splunk.com/t5/Getting-Data-In/Not-allowing-to-change-sourcetype-for-UDP/m-p/51868#M9947 <P>I have UDP 514 input data configured for syslog but somehow if i select sourcetype From list : syslog and save </P> <P>it automatically revert back to "Manual" syslog </P> Tue, 01 Mar 2011 23:27:28 GMT https://community.splunk.com/t5/Getting-Data-In/Not-allowing-to-change-sourcetype-for-UDP/m-p/51868#M9947 satishp 2011-03-01T23:27:28Z https://community.splunk.com/t5/Getting-Data-In/Not-allowing-to-change-sourcetype-for-UDP/m-p/51869#M9948 <P>I guess, I know what you mean. As long as your sourcetype is correct, everything is ok. Either you set it manually or from the list (that doesn't matter, even if it jumps back, when you "verify" your entry)</P> <P>When you go to Manager » Data inputs » UDP and in Column "Source type" is syslog, everything's fine</P> Wed, 02 Mar 2011 02:16:53 GMT https://community.splunk.com/t5/Getting-Data-In/Not-allowing-to-change-sourcetype-for-UDP/m-p/51869#M9948 LCM 2011-03-02T02:16:53Z