Uploaded image for project: 'Camel'
  1. Camel
  2. CAMEL-16540

camel-splunk - Include options to only send message body or headers

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.10.0
    • Component/s: camel-splunk-hec
    • Labels:
      None
    • Estimated Complexity:
      Novice

      Description

      Problem

      splunk-hec always sends the message body and headers under the static json keys "body" and "headers" respectively.

      Solution

      Include an option that defaults to the current behavior of sending the body and the headers.

      These new options `bodyOnly` and `headersOnly` should send either the body or the headers. If both are true then prefer headers. This also removed the need to create a map with static keys.

      Rationale

      1. Including the headers makes searching more tedious and our queries must always be prefixed with `body.`.
      2. Splunk charged based off of the amount of data you index. Indexing data you don't need can add up an unnecessary bill.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                acosentino Andrea Cosentino
                Reporter:
                iridian-ks Dillon Gilmore
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: