splunk-hec 0.1.7 released!
Alas, I got too keen when I released 0.1.6 and inadvertently sold everyone short. That version was only ever sending payload off to Splunk, eliminating any custom attributes attached to the message object.
-- my most humble apologies for that oversight --
Good News!!!! A colleague spotted the bug quickly and I was able to set about making the correction.
Along with this "bug fix" came a new feature, the ability to pass the custom config along with payload to Splunk, or omit it.
If you did grab 0.1.6, please do yourself a favour and update to 0.1.7
The biggest change in this version from the last is passthrough must now use msg.config.<configItem> in order to pass through and override default config.
Config interface
Sample Configuration - Removing custom passthrough from Splunk message
Please be sure to provide feedback if you have any suggested improvements
Regards,
Icy
