Problem Sourcetype - Extraction

geantver0000 · ‎06-15-2017

Hello,

I receive logs from my server and I want to extract manually some field but I get this error :
The events associated with this job have no sourcetype information: 1487574114.12877

What to do ... ?

Steve

dhirendra761 · ‎09-11-2018

Hi @geantver0000 Please find your answer in below URL:

https://answers.splunk.com/answers/578392/field-extraction-issue-on-events-with-no-sourcetyp.html

Problem Sourcetype - Extraction

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Splunk App Dev Quarterly Roundup: AI, Agents, and Innovation!

What’s New in Splunk AI: Volume 02

Value Insights: Now Generally Available in the CMC

Join the Conversation

Problem Sourcetype - Extraction

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Splunk App Dev Quarterly Roundup: AI, Agents, and Innovation!

What’s New in Splunk AI: Volume 02

Value Insights: Now Generally Available in the CMC