You can leave your source type as syslog and it will get transformed in the props.conf [syslog] TRANSFORMS-sourcetype=f5-dcfw,f5-syslog,f5-access My input is like this; [tcp://9515] disabled = false connection_host=ip index = F5 sourcetype = syslog ... View more

Hi Gerald, I tried to use this config on my Windows machine but splunkd is not communicating with the proxy. I can access the proxy using a normal browser but not through the app. Did anyone managed to get this working? Thanks. ... View more

Hi Simeon, Where do you define this variable within python? ... View more