Hi,
I have installed "Technology Add-On for Cisco IOS" and "Cisco IOS" successfully.
But I can't find "cisco:ios" sourcetype when I try to add datasource.
How to resolve this problem?
Thanks...
You need to select manual sourcetype and enter cisco:ios. It won't show up in the sourcetype list as it isn't a built-in sourcetype 🙂
Now , it's Ok
Thanks a lot
a little addition here: the TA for Cisco iOS has a props setting for sourcetype=syslog
so it will apply the correct sourcetype=cisco:ios
on any syslog input that will match the transform regex/rules 😉