Hello,
This is my input.conf on the iis server:
[monitor://D:\IISLogs\W3SVC2]
index=iis_db
sourcetype=iis
However, this is my search result returns ii-2 instead of iis.
Is there a reason why the sourcetype in my search result is iis-2 instead of iis?
There are no changes to the index or sourcetype in transform.conf or props.conf.
... View more