Getting Data In

How do I find the custom sourcetypes I created to use in my app?

kozhin
New Member

Hello,

I need help. How do I find sourcetypes that I made? I want to use them in my app. I made some custom sourcetypes and I tried to find them in props.conf and inputs.conf, but I found only basic sourcetypes. So I need your help.

Tags (1)
0 Karma

yannK
Splunk Employee
Splunk Employee

use btool

./splunk cmd btool props list "mysourcetype" 

add "--debug" is you want to see where every settings are, you will see many defaults ones.

0 Karma

kozhin
New Member

hello i tried to do this thing, but splunk answered "no results found". so probably i need more recomendation or this method is wrong.

0 Karma

kozhin
New Member

hey i tried to do it. splunk said * no results found*

0 Karma

stephanefotso
Motivator

Hello! Start here: http://docs.splunk.com/Documentation/Splunk/6.2.0/Data/Whysourcetypesmatter
if any issue, let me know.

SGF
0 Karma

kozhin
New Member

I made sourcetypes long time ago in splunk. but i can't find them in files(in props.conf too). i know that they saved somewhere but i can't find this place.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...