From a26099ba337d4bf1f8d8d63a57e4fd6c396be672 Mon Sep 17 00:00:00 2001 From: rfaircloth-splunk Date: Thu, 12 Mar 2020 12:05:21 -0400 Subject: [PATCH] Update lp-sc4s_startup.conf.tmpl --- package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl b/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl index b255e92..8d6a5d6 100644 --- a/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl +++ b/package/etc/conf.d/log_paths/lp-sc4s_startup.conf.tmpl @@ -4,7 +4,7 @@ log { source(s_startup_out); rewrite { r_set_splunk_dest_default(sourcetype("sc4s_events:startup:out"), index("main"))}; - parser {p_add_context_splunk(key("sc4s:events")); }; + parser {p_add_context_splunk(key("sc4s_events")); }; {{- if or (conv.ToBool (getenv "SC4S_DEST_SPLUNK_HEC_GLOBAL" "yes")) (conv.ToBool (getenv "SC4S_DEST_INTERNAL_EVENTS_HEC" "no")) }} destination(d_hec_internal);