fix: Add sourcetype to metrics

splunk · Nov 3, 2021 · d3f393a · d3f393a
1 parent f890582
commit d3f393a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/splunk_connect_for_snmp_poller/manager/hec_sender.py b/splunk_connect_for_snmp_poller/manager/hec_sender.py
@@ -189,7 +189,9 @@ def build_metric_data(
     metric_name = json_val["metric_name"]
     metric_value = json_val["_value"]
     fields = {
-        "metric_name:" + metric_name: metric_value,
+        "sourcetype": "sc4snmp:metric",
+        "source": "sc4snmp",
+        f"metric_name:{metric_name}": metric_value,
         EventField.FREQUENCY.value: ir.frequency_str,
     }
     if mib_enricher: