I have installed "Technology Add-On for Cisco IOS" and "Cisco IOS" successfully.
But I can't find "cisco:ios" sourcetype when I try to add datasource.
How to resolve this problem?
a little addition here: the TA for Cisco iOS has a props setting for
sourcetype=syslog so it will apply the correct
sourcetype=cisco:ios on any syslog input that will match the transform regex/rules 😉