You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Right now the kafka-connect-splunk sink puts all consumed data under the "event" object. Adding support to populate the "fields" object (with JSON data of course) would enable the sink to specify indexed field extractions
The text was updated successfully, but these errors were encountered:
Starting with version 6.5, Splunk has added a top level object - parallel to "event" - called "fields". Reference:
http://dev.splunk.com/view/event-collector/SP-CAAAFB6
Right now the kafka-connect-splunk sink puts all consumed data under the "event" object. Adding support to populate the "fields" object (with JSON data of course) would enable the sink to specify indexed field extractions
The text was updated successfully, but these errors were encountered: