# What does these Splunk source mean

**URL:** <https://community.jenkins.io/t/what-does-these-splunk-source-mean/17948>\
**Category:** Community\
**Created:** [August 6, 2024, 8:26pm UTC](https://community.jenkins.io/t/what-does-these-splunk-source-mean/17948 "2024-08-06T20:26:58Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PT-Build](https://avatars.discourse-cdn.com/v4/letter/p/838e76/32.png) [@PT-Build](https://community.jenkins.io/u/PT-Build)\
**Post date:** [August 6, 2024, 8:26pm UTC](https://community.jenkins.io/t/what-does-these-splunk-source-mean/17948/1 "2024-08-06T20:26:58Z")

</div>

Our Jenkins is configured to send the below to Splunk and is working fine.

```auto
"splunkConfig": {
    "enabled": "true",
    "events": [
      {
        "datasource": "Build Event",
        "keyname": "Index",
        "value": "jenkins"
      }
    ],
    "host": "xx.xxx.xx.xxx",
    "port": 8088,
    "splunkAppUrl": "https://our splunk url/en-US/app/splunk_app_jenkins/",
    "token": "whatever"
  }

```

On Splunk side, we see sourcetype is json:jenkins.

We see 5 source, can someone explain what they are and what they do?

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/6/6b5a0bac82cde28aded6ed3665232d999aa40c49.png)  
Our Splunk folks said these are directories in Jenkins but we are unable to find them.

Thank you.