Manual sourcetype for data input not persistent when indexed

[benwu63]

I configured a data input to monitor a directory holding the csv files that will be consumed by Splunk. I manually specify 'csv' as the sourcetype in inputs.conf. However, when those csv files being indexed by Splunk, those events appearing in the app context as "csv-1" as sourcetype and some later added csv files being indexed as "csv-2" as sourcetype.

From Splunk documentation (http://docs.splunk.com/Documentation/Splunk/latest/Data/Whysourcetypesmatter#How_Splunk_assigns_sour...), it indicated that explicit sourcetype specification will be used and it stops here. But why this is not the case for my data inputs???

Thanks in advance for your time in reading my question!

[Ayn · Accepted solution]

This is an effect of using the specific sourcetype "csv". See more info in this answer for instance: http://splunk-base.splunk.com/answers/72860/sourcetypes-keep-on-multiplying

[kristian_kolb]

It's (still) a known bug. See the release notes.