From 33e62aa342994208f9a9e6a4d53ecc357643ddbb Mon Sep 17 00:00:00 2001 From: rfaircloth-splunk Date: Thu, 12 Mar 2020 12:19:08 -0400 Subject: [PATCH] Update lp-sc4s_startup.conf.tmpl --- package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl b/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl index 8d6a5d6..6b1d7e9 100644 --- a/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl +++ b/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl @@ -3,7 +3,7 @@ log { source(s_startup_out); - rewrite { r_set_splunk_dest_default(sourcetype("sc4s_events:startup:out"), index("main"))}; + rewrite { r_set_splunk_dest_default(sourcetype("sc4s:events:startup:out"), index("main"))}; parser {p_add_context_splunk(key("sc4s_events")); }; {{- if or (conv.ToBool (getenv "SC4S_DEST_SPLUNK_HEC_GLOBAL" "yes")) (conv.ToBool (getenv "SC4S_DEST_INTERNAL_EVENTS_HEC" "no")) }}