We've got over 50 sourcetypes, however, when I run the command below, I only see syslog under the sourcetype column.
| metadata type=sourcetypes | sort - totalCount
Does anyone have an explanation?
↧