diff --git a/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl b/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl index 8f94271..45811d7 100644 --- a/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl +++ b/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl @@ -37,7 +37,7 @@ rewrite r_set_splunk_default { #overridden by user defined values block rewrite r_set_splunk_dest_default( #While the following is not used it remains to prevent breaking changes in content - index('{{- getenv "SC4S_DEST_SPLUNK_HEC_FALLBACK_INDEX" }}') + index("{{- getenv "SC4S_DEST_SPLUNK_HEC_FALLBACK_INDEX" }}") source("${.splunk.source}") sourcetype() template(`splunk-template`)