Hi everyone,
I have doubts about character limits to sourcetype.
I'll need to get a sourcetype name using transforms/meta, but I have very large fields, greater than 50 characters. This will be a problem?
Thanks
If you're referring to the length of sourcetype field, then officially there is no character limit. I've created/seen sourcetypes names with character length of 100+ without any issues. (other than it's becomes inconvenient to write queries/field extraction using lengthy sourcetype names).
If you're referring to the length of sourcetype field, then officially there is no character limit. I've created/seen sourcetypes names with character length of 100+ without any issues. (other than it's becomes inconvenient to write queries/field extraction using lengthy sourcetype names).