I guess, I know what you mean. As long as your sourcetype is correct, everything is ok. Either you set it manually or from the list (that doesn't matter, even if it jumps back, when you "verify" your entry)
When you go to Manager » Data inputs » UDP and in Column "Source type" is syslog, everything's fine
... View more