Archive
Highlighted

rfc5424_syslog is not showing in source type list

New Member

After I installed rfc5424 app, rfc5424syslog is not showing in sourcetype drop down list.

Is it suppose to show? or I need to set it rfc5424_syslog manually?

Tags (1)
0 Karma
Highlighted

Re: rfc5424_syslog is not showing in source type list

Splunk Employee
Splunk Employee

You must manually set the sourcetype to "rfc5424_syslog" when configuring the input.

0 Karma