About Jeanmichou

Jeanmichou · ‎02-23-2023

I have the impression that it caches the old sourcetype when it no longer exists

Jeanmichou · ‎02-23-2023

Hello, after having redeployed my UF (with a props because my logs are in csv). I end up with my new parsing mixed with the old parsing. Does it speak to you? In my case, I have my logs which end up with a non-existent header (it takes the 1st line of the csv which is a log). And at the same time it also parses correctly (because I modified the problem). THANKS

Jeanmichou · ‎02-02-2023

It's rather strange to not have any official documentation on this. This is something on which we have blocked a long time (for the csv case) and I have not found any concrete doc on the internet. We will duplicate the file because of this, it will generate additional maintenance to maintain it. It's sad 😞

Jeanmichou · ‎02-01-2023

Hello, thks for the answer. It's a csv file. That's what I thought but I would have liked to do things "properly". There is a non-exhaustive list of what can or cannot be put in each application-props?

Jeanmichou · ‎02-01-2023

Hello, I have an application with an uf, an indexer and a sh. For a csv it is recommended to put some options in the uf and others in the indexer. For example the field_names. Do you know what types of options to put where?

Posts	6
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎02-01-2023

Online Status	Offline
Date Last Visited	‎02-23-2023 06:46 AM

Can I have 2 sourcetype in one?

Which prop options to put intl the uf or indexer?

Re: 2 sourcetype in one

Can I have 2 sourcetype in one?

Re: Which prop options to put intl the uf or index...

Re: Which prop options to put intl the uf or index...

Which prop options to put intl the uf or indexer?