diff --git a/deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf b/deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf index b0a63ee..345806b 100644 --- a/deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf +++ b/deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf @@ -1,5 +1,5 @@ [monitor:///var/rsyslog/*/esxi/*/*/*.log] disabled = false index = idx_m-tic_esxi -sourcetype = esxi +sourcetype = vmw-syslog host_segment = 6 \ No newline at end of file