Hello ,
I have installed the syndication input app from splunk base https://splunkbase.splunk.com/app/2646/ .I gave the URL https://status.webex.com/history.rss and gave custom sourcetype and created new index=webex .But I see data going to index main and having source=/opt/splunk/var/spool/splunk/syndication___RSS_WEBEX_1585256859.14_12157.stash_syndication_input sourcetype=stash_syndication_input-too_small and does not recognize timestamp .I want to use the custom sourcetype and index so that the event breaks correctly and it recognizes the timestamp.How to create an input and which file to edit.
Thanks in Advance
