After I installed rfc5424 app, rfc5424_syslog is not showing in source_type drop down list.
Is it suppose to show? or I need to set it rfc5424_syslog manually?
You must manually set the sourcetype to "rfc5424_syslog" when configuring the input.