Merge pull request #18 from splunk/rfaircloth-splunk-patch-1

feat(meta): Add meta sourcetype
splunk · Mar 11, 2021 · 48632a6 · 48632a6
2 parents 2c18e38 + c61c03e
commit 48632a6
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 2 deletions.
diff --git a/package/default/props.conf b/package/default/props.conf
@@ -14,4 +14,17 @@ ANNOTATE_PUNCT = false
 
 DATETIME_CONFIG=CURRENT
 
-REPORT-fields = ta_sc4snmp_trap
+REPORT-fields = ta_sc4snmp_kv
+
+[sc4snmp:meta]
+pulldown_type = 0
+NO_BINARY_CHECK = 1
+SHOULD_LINEMERGE = false
+KV_MODE = NONE
+LEARN_SOURCETYPE = false
+LEARN_MODEL = false
+ANNOTATE_PUNCT = false
+
+DATETIME_CONFIG=CURRENT
+
+REPORT-fields = ta_sc4snmp_kv
diff --git a/package/default/transforms.conf b/package/default/transforms.conf
@@ -3,5 +3,5 @@
 ## SPDX-License-Identifier: LicenseRef-Splunk-1-2020
 ##
 ##
-[ta_sc4snmp_trap]
+[ta_sc4snmp_kv]
 REGEX = (?:^| )(?<_KEY_1>[^=]*)=(?! )(?<_VAL_1>.+?)(?=(?: [^ ]*(?<!\\)=|$))