Splunk Search

rfc5424_syslog is not showing in source type list

wlifeng
New Member

After I installed rfc5424 app, rfc5424_syslog is not showing in source_type drop down list.

Is it suppose to show? or I need to set it rfc5424_syslog manually?

Tags (1)
0 Karma

dmillis
Splunk Employee
Splunk Employee

You must manually set the sourcetype to "rfc5424_syslog" when configuring the input.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...