From d4b90d3d691ce98b706e86e5bb0638536e73dabe Mon Sep 17 00:00:00 2001 From: rfaircloth-splunk Date: Tue, 31 Mar 2020 12:08:49 -0400 Subject: [PATCH] fix --- package/etc/conf.d/filters/misc/catchfirst.conf | 5 ----- package/etc/conf.d/filters/misc/null_queue.conf | 5 +++++ 2 files changed, 5 insertions(+), 5 deletions(-) delete mode 100644 package/etc/conf.d/filters/misc/catchfirst.conf create mode 100644 package/etc/conf.d/filters/misc/null_queue.conf diff --git a/package/etc/conf.d/filters/misc/catchfirst.conf b/package/etc/conf.d/filters/misc/catchfirst.conf deleted file mode 100644 index f967591..0000000 --- a/package/etc/conf.d/filters/misc/catchfirst.conf +++ /dev/null @@ -1,5 +0,0 @@ -#f_null_queue -filter f_null_queue { - match("^catch_first", value("fields.sc4s_vendor_product")); - -}; \ No newline at end of file diff --git a/package/etc/conf.d/filters/misc/null_queue.conf b/package/etc/conf.d/filters/misc/null_queue.conf new file mode 100644 index 0000000..561a2a8 --- /dev/null +++ b/package/etc/conf.d/filters/misc/null_queue.conf @@ -0,0 +1,5 @@ +#f_null_queue +filter f_null_queue { + match("^null_queue", value("fields.sc4s_vendor_product")); + +}; \ No newline at end of file