how to identify sourcetype forbetter parsing

[krutika_ag]

I need help in understanding that what sourcetype would be ideal to parse logs of this File type

[isoutamo]

Hi
Usually you will get some hints about product by looking the directory hierarchy and names on it.
r. Ismo

[gcusello]

Hi @krutika_ag,

you should know where these logs come from, or at least what system produced them.

If not, you could try using the Splunk automatic recognition but I don't like this solution because the error margin is very large.

You could open the files and take some strings to search on internet what could be the technologu that produced them and then you could search the relative sourcetype.

Ciao.

Giuseppe