/ Jan 14th, 2020 /

Rename `line` field to `message` in `splunk_hec` source

This change ensures the `splunk_hec` source conforms to Vector's schema

The splunk_hec source now emits events with a message key instead of a line key. This can be renamed via the global log_schema options.

Upgrade Guide

There are no changes you need to make. Just be aware that your events will no longer have a line field.

This change was made available in 0.7.0. You can get this change by downloading the latest stable release.

Like What You See?