HttpEventlogCollector and sourceType #38

albertromkes · 2016-10-25T07:36:51Z

When posting an entry with the 'sourceType' parameter set, I'll get a 404 bad request back from Splunk (version 6.4.1). If I change 'sourceType' into 'sourcetype' (all lowercase), it starts working.

I'm not sure if this is a setting in Splunk itself or a bug in this sink. If it's a bug, let me know. Then I'll create a pull request with a fix.

merbla · 2016-10-25T10:35:31Z

Hey @albertromkes,

Thanks for the note. I can confirm the bug, I believe it relates to changes to a new JSON formatter.

It relates to https://github.com/serilog/serilog-sinks-splunk/blob/dev/src/Serilog.Sinks.Splunk/Sinks/Splunk/SplunkJsonFormatter.cs#L79 as you mentioned.

If you are happy to do a PR that would be great, otherwise let me know and I will jump on it.

…sourcetype

Fix for issue #38. sourceType is now all lowercase -> sourcetype

merbla · 2016-10-25T22:20:43Z

@albertromkes the new package is up at Nuget.

albertromkes added a commit to albertromkes/serilog-sinks-splunk that referenced this issue Oct 25, 2016

Fix for issue serilog-contrib#38. sourceType is now all lowercase -> …

19c8c14

…sourcetype

merbla added a commit that referenced this issue Oct 25, 2016

Merge pull request #39 from albertromkes/bugfix/sourcetype-property

2d8fb39

Fix for issue #38. sourceType is now all lowercase -> sourcetype

merbla closed this as completed Oct 25, 2016

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

HttpEventlogCollector and sourceType #38

HttpEventlogCollector and sourceType #38

albertromkes commented Oct 25, 2016

merbla commented Oct 25, 2016 •

edited

Loading

merbla commented Oct 25, 2016

HttpEventlogCollector and sourceType #38

HttpEventlogCollector and sourceType #38

Comments

albertromkes commented Oct 25, 2016

merbla commented Oct 25, 2016 • edited Loading

merbla commented Oct 25, 2016

merbla commented Oct 25, 2016 •

edited

Loading