Merge pull request #364 from splunk/destination/debug_hec_template

Update `d_hec_debug` to use gomplate
CSVD · Mar 24, 2020 · bc07dc4 · bc07dc4
2 parents dab8f2e + 939d4b3
commit bc07dc4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...conf.d/destinations/splunk_hec_debug.conf → ...d/destinations/splunk_hec_debug.conf.tmpl b/...conf.d/destinations/splunk_hec_debug.conf → ...d/destinations/splunk_hec_debug.conf.tmpl
@@ -1,6 +1,6 @@
 destination d_hec_debug {
     file("/opt/syslog-ng/var/archive/debug/${.splunk.sourcetype}/${HOST}/$YEAR-$MONTH-$DAY-message.log"
-        template("curl -k -u \"sc4s HEC debug:$(env SPLUNK_HEC_TOKEN)\" \"$(env SPLUNK_HEC_URL)\" -d '$(format-json
+        template("curl -k -u \"sc4s HEC debug:{{- getenv "SPLUNK_HEC_TOKEN"}}\" \"{{- getenv "SPLUNK_HEC_URL" | strings.ReplaceAll "/services/collector" "" | strings.ReplaceAll "/event" "" | regexp.ReplaceLiteral "[, ]+" "/services/collector/event " }}/services/collector/event\" -d '$(format-json
                  time=$S_UNIXTIME.$S_MSEC
                  host=${HOST}
                  source=${.splunk.source}