Remove Event field as it is causing issues with pre-trained source types#8039
Remove Event field as it is causing issues with pre-trained source types#8039ssoroka merged 1 commit intoinfluxdata:masterfrom samm-git:hec-fixes
Conversation
|
Few quotes from support replies, just in case
|
|
@sjwang90 any chance to get this merged? We are using own fork due to that and it may affect other users. |
ssoroka
left a comment
There was a problem hiding this comment.
seems reasonable. Thanks :)
…pes (influxdata#8039) Co-authored-by: Oleksii Samorukov <oleksii_samorukov@mckinsey.com>
Contrary to influxdata#8039, splunk documentation does require the event tag with metric value. This reverts that previous change. fixes: influxdata#8761
…pes (influxdata#8039) Co-authored-by: Oleksii Samorukov <oleksii_samorukov@mckinsey.com>
Required for all PRs:
Description
I found that telegraf metrics export to splunk does not work on some of our environments. After all i found that reason was "event: metric" object in the json. To understand if it is needed here and why it works on some other environments i opened ticket to the vendor.
Summary of replies is:
eventfield is not needed for the normal splunk metrics and it shoud work without it in all cases._jsonorcollectd_http) splunk would fail if this field is exists, probably due to more strict json checking.After this i decided to raise this PR to remove this field from the upstream. I tested it on my environments and it works fine.