Skip to content

Commit

Permalink
use k8s.resource.name attribute for sourcetype
Browse files Browse the repository at this point in the history
  • Loading branch information
harshit-splunk committed Jan 20, 2023
1 parent f8b4f74 commit dc3f8af
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -111,7 +111,7 @@ processors:
log_statements:
- context: log
statements:
- set(resource.attributes["com.splunk.sourcetype"], Concat(["kube:object:", attributes["event.name"]], ""))
- set(resource.attributes["com.splunk.sourcetype"], Concat(["kube:object:", attributes["k8s.resource.name"]], ""))
{{- end }}

# Resource attributes specific to the collector itself.
Expand Down

0 comments on commit dc3f8af

Please sign in to comment.