Can't find "cisco:ios" sourcetype

[wookercn]

Hi,

I have installed "Technology Add-On for Cisco IOS" and "Cisco IOS" successfully.

But I can't find "cisco:ios" sourcetype when I try to add datasource.

How to resolve this problem?

Thanks...

[mikaelbje]

You need to select manual sourcetype and enter cisco:ios. It won't show up in the sourcetype list as it isn't a built-in sourcetype 🙂

[wookercn]

Now , it's Ok
Thanks a lot

[MuS]

a little addition here: the TA for Cisco iOS has a props setting for sourcetype=syslog so it will apply the correct sourcetype=cisco:ios on any syslog input that will match the transform regex/rules 😉