Skip to content

Commit 6d06f26

Browse files
committed
output_splunk: event_source_key config to override source
1 parent 864f352 commit 6d06f26

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

pipeline/outputs/splunk.md

+1
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,7 @@ Content and Splunk metadata \(fields\) handling configuration properties:
3333
| event\_key | Specify the key name that will be used to send a single value as part of the record. | |
3434
| event\_host | Specify the key name that contains the host value. This option allows a record accessors pattern. | |
3535
| event\_source | Set the source value to assign to the event data. | |
36+
| event\_source\_key | Set a record key that will populate 'source'. If the key is found, it will have precedence over the value set in `event_source`. | |
3637
| event\_sourcetype | Set the sourcetype value to assign to the event data. | |
3738
| event\_sourcetype\_key | Set a record key that will populate 'sourcetype'. If the key is found, it will have precedence over the value set in `event_sourcetype`. | |
3839
| event\_index | The name of the index by which the event data is to be indexed. | |

0 commit comments

Comments
 (0)