Back to Vector

Rename `line` field to `message` in `splunk_hec` source

website/content/en/highlights/2020-01-14-rename-line-field-to-message.md

0.55.0434 B
Original Source

The splunk_hec source now emits events with a message key instead of a line key. This can be renamed via the global log_schema options.

Upgrade Guide

There are no changes you need to make. Just be aware that your events will no longer have a line field.