From 47351d0a357d7a8547faea59d47032ab5f2d8c5e Mon Sep 17 00:00:00 2001
From: rfaircloth-splunk <rfaircloth@splunk.com>
Date: Mon, 15 Jun 2020 15:03:46 -0400
Subject: [PATCH] Update splunkfields.conf.tmpl

---
 package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl b/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl
index 56e3017..d5dddb1 100644
--- a/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl
+++ b/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl
@@ -36,7 +36,9 @@ rewrite r_set_splunk_default {
 #used by each log-path to set source and sourcetype which may be
 #overridden by user defined values
 block rewrite r_set_splunk_dest_default(
-                              source("${.splunk.source}")
+                              #While the following is not used it remains to prevent breaking changes in content
+                              index('')
+                              source("${.splunk.source}")                              
                               sourcetype()
                               template(`splunk-template`)
                            ) {