Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SplunkHecExporter: Add support for LogFormat.name field #2685

Closed
breedx-splk opened this issue Mar 12, 2021 · 0 comments · Fixed by #3119
Closed

SplunkHecExporter: Add support for LogFormat.name field #2685

breedx-splk opened this issue Mar 12, 2021 · 0 comments · Fixed by #3119

Comments

@breedx-splk
Copy link
Contributor

The Splunk HEC Exporter supports logs, but conversion of pdata.LogRecord into the splunk.Event does not pass along the name field. Right now, it appears that LogRecord.name is just dropped on the floor.

This field is optional in the spec, but if a user provides one it's probably needed/wanted and should be represented in the HEC data export.

There isn't a corresponding name field in the HEC Event type, so I see two possibilities:

  • overload the splunk.sourceTypeLabel field (sounds complicated and have to handle conflicts in a sane way)
  • cook up a well known attribute and add it to the HEC fields. I'll suggest otlp.log.name but am not married to it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant