Can I use custom sourcetype?

[vikramyadav]

I have downloaded this application and the default source type which this app is using is "zyxel-fw". I want to use my own custom source type for Zyxel logs. Is it possible to do it?

[abhishekkalokhe]

Yes, you can

This app is moduler, you just have to change the sourcetype entry from eventtypes. And you are good to go.
There is a link in Home page of app to change the configuration.

[wwhite12]

Short answer, yes, but it is not recommended. In downloaded apps, their pre-defined sourcetypes are usually defined multiple times throughout the app. Meaning, changing the sourcetype to your custom preference in one place(like props.conf) but not updating it in another (like inputs.conf) could lead to data not being parsed correctly.
If you absolutely want to change it to your custom sourcetype, you can go to the app in the CLI, update every stanza where a sourcetype is listed, and then perform a restart.