HBO6515W This field takes effect only when the protocol is "Splunk HEC with customized field support (secure)". For how to customize the data source type for HEC, see the data stream configuration information in the product documentation.
Explanation
This warning message informs you that the operation will change the data source type in the subscriber data index. It only affects the data which is sent via the protocol Splunk HEC with customized field support or Splunk HEC with customized field support secure. For other protocols, the data source type will not be changed. It remains the value in the data source type field.
Response
Check the guidelines before you customize the data source type for HEC.