Kemp Add-on Question

[dania_abujuma]

Hello! I have installed the kemp add-on from here: https://splunkbase.splunk.com/app/6830 .

The issue is I cannot find a proper documentation on how to setup data and what sourcetype to specify in the inputs.conf .

For more context, I am collecting the logs through syslog not API, so I need to specify the sourcetype in the inputs.conf for parsing to work properly.

[richgalloway]

Look in the add-on's props.conf file to see what sourcetypes are defined.  Then choose the one that matches your data.  Be advised that data arriving via syslog may be in a different format than that fetched by an API so the props may not work as expected.