Startup log path splunk_indexes.conf fix

* Fix sourcetype/key reversal in startup log path
CSVD · Mar 11, 2020 · 4da7ae8 · 4da7ae8
1 parent 6fdbeb0
commit 4da7ae8
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl b/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl
@@ -3,8 +3,8 @@
 log {
     source(s_startup_out);
 
-    rewrite { r_set_splunk_dest_default(sourcetype("sc4s:events"), index("main"))};
-    parser {p_add_context_splunk(key("sc4s_events:startup:out")); };
+    rewrite { r_set_splunk_dest_default(sourcetype("sc4s_events:startup:out"), index("main"))};
+    parser {p_add_context_splunk(key("sc4s:events")); };
 
     {{- if or (conv.ToBool (getenv "SC4S_DEST_SPLUNK_HEC_GLOBAL" "yes")) (conv.ToBool (getenv "SC4S_DEST_INTERNAL_EVENTS_HEC" "no")) }}
     destination(d_hec_internal);