We have installed forwarder in cloudforms node. But after getting the logs i cant find the exact field in search . Please help me to set the correct source type for automation.log file.,
if there is no sourcetype created in CIM , you may need to create custom sourcetype for the same.
if issue is to just parse events correctly, timestamp and event breaks, it is fairly easy. Field extractions may take some effort.
