Solved: Not allowing to change sourcetype for UDP

satishp · ‎03-01-2011

I have UDP 514 input data configured for syslog but somehow if i select sourcetype From list : syslog and save

it automatically revert back to "Manual" syslog

LCM · ‎03-01-2011

I guess, I know what you mean. As long as your sourcetype is correct, everything is ok. Either you set it manually or from the list (that doesn't matter, even if it jumps back, when you "verify" your entry)

When you go to Manager » Data inputs » UDP and in Column "Source type" is syslog, everything's fine

View solution in original post

LCM · ‎03-01-2011

I guess, I know what you mean. As long as your sourcetype is correct, everything is ok. Either you set it manually or from the list (that doesn't matter, even if it jumps back, when you "verify" your entry)

When you go to Manager » Data inputs » UDP and in Column "Source type" is syslog, everything's fine

Not allowing to change sourcetype for UDP

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

Splunk Community Badges!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

Join the Conversation