RSS (Syndication) - Can't set SourceType

jeromemarcotty · ‎06-22-2015

Hello everyone,

I need to use an RSS input in my splunk.
The Syndication add-on with it's RSS support was great for that.
My current problem is that when i want to setup a new sourcetype, the configuration doesn't take it into account and "rollback" to automatic sourcetype all the time.
I have try several sourcetype and it still doesn't work.
Is-it a known issue ? Do i do something wrong ?

Thanks for your help !

LukeMurphey · ‎06-22-2015

You are not doing anything wrong. I just tested it and it doesn't work correctly. I opened a bug ticket (http://lukemurphey.net/issues/1013) on it and will fix it.

Update:

Fix provided in version 1.0.1.

RSS (Syndication) - Can't set SourceType

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Join the Conversation

RSS (Syndication) - Can't set SourceType

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features