Rename line field to message in splunk_hec source

This change ensures the splunk_hec source conforms to Vector’s schema

Page source Edit this page

The splunk_hec source now emits events with a message key instead of a line key. This can be renamed via the global log_schema options.

Upgrade Guide

There are no changes you need to make. Just be aware that your events will no longer have a line field.