My custom script writes log in /opt/splunk/var/log/splunk/script.log.
I want the log to be indexed in _internal but have to define a customized sourcetype for the log to write in a proper linebreak. Please let me know how to define sourcetype for the _internal data.
↧