Skip to content

Commit

Permalink
Update p_zz_fallback.conf.tmpl
Browse files Browse the repository at this point in the history
  • Loading branch information
rfaircloth-splunk committed Dec 17, 2019
1 parent 4b87e50 commit b6397f5
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions package/etc/conf.d/log_paths/p_zz_fallback.conf.tmpl
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ log {
if {
filter(f_is_rfc5424_strict);
rewrite {
r_set_splunk_dest_default(sourcetype("sc4s:fallback"), index("main"), template("t_JSON"));
r_set_splunk_dest_default(sourcetype("sc4s:fallback"), index("main"));
set("$(template ${.splunk.sc4s_template} $(template t_JSON))" value("MSG"));
};
parser {
Expand All @@ -27,7 +27,7 @@ log {

} else {
rewrite {
r_set_splunk_dest_default(sourcetype("sc4s:fallback"), index("main"), template("t_JSON"));
r_set_splunk_dest_default(sourcetype("sc4s:fallback"), index("main") );
set("$(template ${fields.sc4s_template} $(template t_JSON))" value("MSG"));
};
parser {
Expand Down

0 comments on commit b6397f5

Please sign in to comment.