too_Small Sourcetype

[peter_gianusso]

What would cause a file being indexed to have a sourcetype of SOAMetrics-too_small ?

I am not assigning that sourcetype.

[peter_gianusso · Accepted solution]

this answers the question

http://splunk-base.splunk.com/answers/4661/why-is-my-sourcetype-auto-classified-as-too_small