fix: delete index for every scenario without regex

splunk · Oct 29, 2021 · 83da375 · 83da375
1 parent 25b8203
commit 83da375
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/splunk_connect_for_snmp_poller/manager/hec_sender.py b/splunk_connect_for_snmp_poller/manager/hec_sender.py
@@ -214,7 +214,6 @@ def extract_additional_properties(fields, metric_name, metric_value, server_conf
     for family in oid_families.keys():
         if metric_name.startswith("sc4snmp." + family):
             stripped = metric_name[: metric_name.index("_")]
-
             input_text = metric_name[metric_name.index("_") + 1 :]  # noqa: E203
 
             entries = oid_families[family][enricher_additional_varbinds]
@@ -226,16 +225,19 @@ def extract_additional_properties(fields, metric_name, metric_value, server_conf
 
                     result = re.match(regex, input_text)
                     if result:
+                        any_regex_matched = True
                         for index, item in enumerate(names_list):
                             fields[item] = result.group(index + 1)
                         del fields["metric_name:" + metric_name]
                         fields["metric_name:" + stripped] = metric_value
                         # TODO delete blow debug statement
                         fields["old_metric_name:" + metric_name] = metric_value
                         continue
-                else:
-                    del fields["metric_name:" + metric_name]
-                    fields["metric_name:" + stripped] = metric_value
+
+            if not any_regex_matched:
+                fields["index_number"] = input_text
+                del fields["metric_name:" + metric_name]
+                fields["metric_name:" + stripped] = metric_value
 
 
 def build_error_data(