Getting Data In

How do I find the custom sourcetypes I created to use in my app?

kozhin
New Member

Hello,

I need help. How do I find sourcetypes that I made? I want to use them in my app. I made some custom sourcetypes and I tried to find them in props.conf and inputs.conf, but I found only basic sourcetypes. So I need your help.

Tags (1)
0 Karma

yannK
Splunk Employee
Splunk Employee

use btool

./splunk cmd btool props list "mysourcetype" 

add "--debug" is you want to see where every settings are, you will see many defaults ones.

0 Karma

kozhin
New Member

hello i tried to do this thing, but splunk answered "no results found". so probably i need more recomendation or this method is wrong.

0 Karma

kozhin
New Member

hey i tried to do it. splunk said * no results found*

0 Karma

stephanefotso
Motivator

Hello! Start here: http://docs.splunk.com/Documentation/Splunk/6.2.0/Data/Whysourcetypesmatter
if any issue, let me know.

SGF
0 Karma

kozhin
New Member

I made sourcetypes long time ago in splunk. but i can't find them in files(in props.conf too). i know that they saved somewhere but i can't find this place.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...