Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can you make index optional.. #41

Closed
projx opened this issue Oct 4, 2020 · 1 comment
Closed

Can you make index optional.. #41

projx opened this issue Oct 4, 2020 · 1 comment

Comments

@projx
Copy link

projx commented Oct 4, 2020

Hi

When configuring a HEC in Splunk it requires a default index to be specified, which get used if no "index" if specified in the HEC request.

Given this, it would be useful to make it optional in Splunk Handler, that way, if a change is needed of the back-end (i.e. migrating to different index), it avoids the next to also update the code.

@jeffreymelvin-wf
Copy link

Would this not be equivalent to setting it to an empty string or None in the code that instantiates the handler?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants