The learned app has it challenges at times but it does try to learn your sourcetypes automatically. Differences in punctuation cause it to have multiple sourcetypes. You can go into the learned app directory and remove those settings in sourcetypes.conf and then explicitly set your inputs.conf to what you want the sourcetypes to be. Unfortunately this won't change any data you've already indexed under those learned sourcetypes. Also, it's not recommended to disable the learned app.
