Hello I have this simple imput that stopped working after renaming the sourcetype
from linux server -> indexers
[monitor:///opt/splunk_connect_for_kafka/kafka_2.13-3.5.1/logs/connect.log]
disabled = false
index = _internal
sourcetype = kafka_connect_log
I restarted the universal forwarder many times, but it is not helping.
Any other troubleshooting steps?
Can anyone help please?