When we install an App (any app) in Splunk, will the sourcetype be created automatically?
Hi @pratapa,
sourcetypes are defined in props.conf, so some apps have predefined sourcetype, but it isn't a rule it depends on the app.
And anyway, it's possible to modify the predefined sourcetypes.
Ciao.
Giuseppe