diff --git a/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl b/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl index 56e3017..d5dddb1 100644 --- a/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl +++ b/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl @@ -36,7 +36,9 @@ rewrite r_set_splunk_default { #used by each log-path to set source and sourcetype which may be #overridden by user defined values block rewrite r_set_splunk_dest_default( - source("${.splunk.source}") + #While the following is not used it remains to prevent breaking changes in content + index('') + source("${.splunk.source}") sourcetype() template(`splunk-template`) ) {