Bug #2350
Source field cannot be overridden in inputs.conf
Start date:
12/18/2018
Due date:
% Done:
100%
Description
See https://docs.splunk.com/Documentation/Splunk/7.2.1/Admin/Inputsconf
Currently, this isn't being passed through output_result_callback()
Associated revisions
Adding ability to customize the source field
Reference #2350
Fixing speedtest which didn't allow source field overrides
Reference #2350
History
#1
Updated by Luke Murphey about 6 years ago
Updated by Also, the source field is getting set to the host field.
See email from Quinn.
#2
Updated by Luke Murphey about 6 years ago
- Status changed from New to Closed
- % Done changed from 0 to 100