Updated sourcetype

splunk · Jul 2, 2024 · 1c2b383 · 1c2b383
1 parent 480a043
commit 1c2b383
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/packer/ansible/roles/linux_sysmon/files/inputs.conf b/packer/ansible/roles/linux_sysmon/files/inputs.conf
@@ -6,4 +6,4 @@ journalctl-exclude-fields = __MONOTONIC_TIMESTAMP,__SOURCE_REALTIME_TIMESTAMP
 journalctl-filter = _SYSTEMD_UNIT=sysmon.service
 index = unix
 source = Syslog:Linux-Sysmon/Operational
-sourcetype = sysmon_linux
+sourcetype = sysmon:linux
diff --git a/packer/ansible/roles/sysmon_linux/files/deb_template_inputs.conf b/packer/ansible/roles/sysmon_linux/files/deb_template_inputs.conf
@@ -6,4 +6,4 @@ journalctl-exclude-fields = __MONOTONIC_TIMESTAMP,__SOURCE_REALTIME_TIMESTAMP
 journalctl-filter = _SYSTEMD_UNIT=sysmon.service
 index = unix
 source = Syslog:Linux-Sysmon/Operational
-sourcetype = sysmon_linux
+sourcetype = sysmon:linux