[CAMEL-16540] camel-splunk - Include options to only send message body or headers

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.10.0
• Component/s: camel-splunk-hec
• Estimated Complexity: Novice
• Assignee: Andrea Cosentino
• Reporter: Dillon Gilmore
• Created: 21/Apr/21 20:47
• Updated: 26/Apr/21 07:06
• Resolved: 26/Apr/21 05:44

Description

Problem

splunk-hec always sends the message body and headers under the static json keys "body" and "headers" respectively.

Solution

Include an option that defaults to the current behavior of sending the body and the headers.

These new options `bodyOnly` and `headersOnly` should send either the body or the headers. If both are true then prefer headers. This also removed the need to create a map with static keys.

Rationale

1. Including the headers makes searching more tedious and our queries must always be prefixed with `body.`.
2. Splunk charged based off of the amount of data you index. Indexing data you don't need can add up an unnecessary bill.

Issue Links

• links to: GitHub Pull Request #5452