From abd84fc0ab553fd6efe7e6a46edee7c551c17130 Mon Sep 17 00:00:00 2001 From: rfaircloth-splunk Date: Mon, 15 Jun 2020 16:21:38 -0400 Subject: [PATCH] Update splunkfields.conf.tmpl --- package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl b/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl index 8f94271..45811d7 100644 --- a/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl +++ b/package/etc/conf.d/conflib/_splunk/splunkfields.conf.tmpl @@ -37,7 +37,7 @@ rewrite r_set_splunk_default { #overridden by user defined values block rewrite r_set_splunk_dest_default( #While the following is not used it remains to prevent breaking changes in content - index('{{- getenv "SC4S_DEST_SPLUNK_HEC_FALLBACK_INDEX" }}') + index("{{- getenv "SC4S_DEST_SPLUNK_HEC_FALLBACK_INDEX" }}") source("${.splunk.source}") sourcetype() template(`splunk-template`)