Uploaded image for project: 'Camel'
  1. Camel
  2. CAMEL-16539

splunk-hec: Option to include only the body or the headers

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.10.0
    • Component/s: camel-splunk-hec
    • Labels:
      None
    • Estimated Complexity:
      Novice

      Description

      Problem

      Right now, when using Camel to process logs into Splunk via the splunk-hec, it includes the message body and the message headers.

      In most cases, we only need the body.

      Solution

      Include an option to include only the body or the headers.

      Rationale

      1. For JSON payloads, having to always include the body when you never use the headers is tedious and ugly.

      2. Splunk charges based off of the amount of data you feed in. Reducing the 10+ headers and body keys can shave off some amount of gigabytes in the long-term.

       

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              iridian-ks Dillon Gilmore
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 2h
                2h
                Remaining:
                Remaining Estimate - 2h
                2h
                Logged:
                Time Spent - Not Specified
                Not Specified