[CAMEL-16539] splunk-hec: Option to include only the body or the headers

• Type: New Feature
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 3.10.0
• Component/s: camel-splunk-hec
• Estimated Complexity: Novice
• Assignee: Unassigned
• Reporter: Dillon Gilmore
• Created: 21/Apr/21 20:43
• Updated: 27/Apr/21 10:16
• Resolved: 27/Apr/21 10:16

Description

Problem

Right now, when using Camel to process logs into Splunk via the splunk-hec, it includes the message body and the message headers.

In most cases, we only need the body.

Solution

Include an option to include only the body or the headers.

Rationale

1. For JSON payloads, having to always include the body when you never use the headers is tedious and ugly.

2. Splunk charges based off of the amount of data you feed in. Reducing the 10+ headers and body keys can shave off some amount of gigabytes in the long-term.