Getting Data In

Not allowing to change sourcetype for UDP

satishp
Explorer

I have UDP 514 input data configured for syslog but somehow if i select sourcetype From list : syslog and save

it automatically revert back to "Manual" syslog

Tags (1)
0 Karma
1 Solution

LCM
Contributor

I guess, I know what you mean. As long as your sourcetype is correct, everything is ok. Either you set it manually or from the list (that doesn't matter, even if it jumps back, when you "verify" your entry)

When you go to Manager » Data inputs » UDP and in Column "Source type" is syslog, everything's fine

View solution in original post

LCM
Contributor

I guess, I know what you mean. As long as your sourcetype is correct, everything is ok. Either you set it manually or from the list (that doesn't matter, even if it jumps back, when you "verify" your entry)

When you go to Manager » Data inputs » UDP and in Column "Source type" is syslog, everything's fine

Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...