Splunk: Enterprise Operational Intelligence Delivered

Sourcetype manager

Sourcetype manager is %another very useful provision added in Splunk 6.3, which can be used to manage the sourcetype for on-boarding the data on %Splunk. It can be used to manage (create, modify, and delete) sourcetype configurations independent of getting data in and searching within the sourcetype picker. We have already learned in the Chapter 2, Developing Application on Splunk about how to assign and configure sourcetype while uploading the data on Splunk.

Sourcetype manager enlists all the sourcetype configured in the Splunk instance along with the inbuilt default sourcetypes. The sourcetype manager can be accessed by navigating in the Splunk Web console to Settings | Data | Sourcetype.

Now let us learn what can be done from ...