Uploaded image for project: 'Camel'
  1. Camel
  2. CAMEL-16539

splunk-hec: Option to include only the body or the headers

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Resolved
    • Minor
    • Resolution: Fixed
    • None
    • 3.10.0
    • camel-splunk-hec
    • None
    • Novice

    Description

      Problem

      Right now, when using Camel to process logs into Splunk via the splunk-hec, it includes the message body and the message headers.

      In most cases, we only need the body.

      Solution

      Include an option to include only the body or the headers.

      Rationale

      1. For JSON payloads, having to always include the body when you never use the headers is tedious and ugly.

      2. Splunk charges based off of the amount of data you feed in. Reducing the 10+ headers and body keys can shave off some amount of gigabytes in the long-term.

       

      Attachments

        Activity

          People

            Unassigned Unassigned
            iridian-ks Dillon Gilmore
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - 2h
                2h
                Remaining:
                Remaining Estimate - 2h
                2h
                Logged:
                Time Spent - Not Specified
                Not Specified