From d7998fd17fe23da3cc6c110ee9f0cacb93ce30cc Mon Sep 17 00:00:00 2001 From: JocelynPa Date: Thu, 11 May 2023 17:37:13 +0200 Subject: [PATCH] change sourcetype --- deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf b/deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf index b0a63ee..345806b 100644 --- a/deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf +++ b/deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf @@ -1,5 +1,5 @@ [monitor:///var/rsyslog/*/esxi/*/*/*.log] disabled = false index = idx_m-tic_esxi -sourcetype = esxi +sourcetype = vmw-syslog host_segment = 6 \ No newline at end of file