Shouldn't this work ? Only If I assign the sourcetype in the inputs.conf of the Universal forwarder this works.. But I don't want to assign it in UF.
[source::/...../config/server.cnf]
sourcetype=my_weird_sourcetype
I'm on linux btw.
↧