Hi,
When I add a new automatic lookup, if I put * at the Apply to: Sourcetype, it does not work, but if i put the specific sourcetype, it works. Does it mean that i need to create a lot of automatic lookups for the same lookup table?
thks
Because the wildcards are not supported for sourcetypes in props.conf.
Only for source or host.
Because the wildcards are not supported for sourcetypes in props.conf.
Only for source or host.