From 672f59ea05e74d981c404573eaf531cb065d9c2f Mon Sep 17 00:00:00 2001 From: Mark Bonsack Date: Thu, 9 Apr 2020 10:39:26 -0700 Subject: [PATCH 1/2] Add PID to `t_program_msg` template * Add missing PID to `t_program_msg` template --- package/etc/conf.d/conflib/_common/templates.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/etc/conf.d/conflib/_common/templates.conf b/package/etc/conf.d/conflib/_common/templates.conf index 1c4259a..c86400f 100644 --- a/package/etc/conf.d/conflib/_common/templates.conf +++ b/package/etc/conf.d/conflib/_common/templates.conf @@ -47,7 +47,7 @@ template t_legacy_hdr_msg { }; template t_program_msg { - template("${PROGRAM}: ${MESSAGE}"); + template("${PROGRAM}[${PID}]: ${MESSAGE}"); }; # =============================================================================================== From 3125fbc35f0e160ac445c252a77b8d026d4a8acb Mon Sep 17 00:00:00 2001 From: Mark Bonsack Date: Thu, 9 Apr 2020 11:05:49 -0700 Subject: [PATCH 2/2] Fix mount point in splunk container * Fix mount point for splunk container volume --- tests/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/docker-compose.yml b/tests/docker-compose.yml index 0a5b9d9..0f070a0 100644 --- a/tests/docker-compose.yml +++ b/tests/docker-compose.yml @@ -60,7 +60,7 @@ services: - SPLUNK_PASSWORD=${SPLUNK_PASSWORD} - SPLUNK_START_ARGS=--accept-license volumes: - - splunk-var:/opt/splunk/vars + - splunk-var:/opt/splunk/var volumes: results: