change sourcetype

3 years ago · d7998fd17f
parent e6f29c456e
commit d7998fd17f
1 changed files with 1 additions and 1 deletions
--- a/deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf
+++ b/deployment-apps/Splunk_TA_esxilogs_HF/local/inputs.conf
@ -1,5 +1,5 @@
 [monitor:///var/rsyslog/*/esxi/*/*/*.log]
 disabled = false
 index = idx_m-tic_esxi
-sourcetype = esxi
+sourcetype = vmw-syslog
 host_segment = 6