Skip to content

Commit

Permalink
Update lp-infoblox.conf.tmpl
Browse files Browse the repository at this point in the history
  • Loading branch information
rfaircloth-splunk committed Feb 26, 2020
1 parent 649250f commit 890280a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion package/etc/conf.d/log_paths/lp-infoblox.conf.tmpl
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ log {
} elif {
filter{program("threat-protect-log")};
rewrite {
set("infoblox_dns", value("fields.sc4s_vendor_product"));
set("infoblox_threat", value("fields.sc4s_vendor_product"));
set("${PROGRAM}", value(".PROGRAM"));
subst('^\/(?:[^\/]+\/)+', "" , value(".PROGRAM"));
r_set_splunk_dest_default(sourcetype("infoblox:threat"), index("netids"), source("program:${.PROGRAM}"))
Expand Down

0 comments on commit 890280a

Please sign in to comment.