Merge pull request #347 from splunk/fix/startuplogs

Correct vendor_product key for syslog-ng std output
CSVD · Mar 12, 2020 · 9102bc3 · 9102bc3
2 parents f2541fa + a26099b
commit 9102bc3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl b/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl
@@ -4,7 +4,7 @@ log {
     source(s_startup_out);
 
     rewrite { r_set_splunk_dest_default(sourcetype("sc4s_events:startup:out"), index("main"))};
-    parser {p_add_context_splunk(key("sc4s:events")); };
+    parser {p_add_context_splunk(key("sc4s_events")); };
 
     {{- if or (conv.ToBool (getenv "SC4S_DEST_SPLUNK_HEC_GLOBAL" "yes")) (conv.ToBool (getenv "SC4S_DEST_INTERNAL_EVENTS_HEC" "no")) }}
     destination(d_hec_internal);