Skip to content

splunk_hec source inconsistent event validation #25371

Description

@thomasqueirozb

A note for the community

  • Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
  • If you are interested in working on this issue or have submitted a pull request, please leave a comment

Problem

On master with log_namespace: true, event {} is accepted. With log_namespace: false, event {} is rejected with EmptyEventField.

Either both should be rejected or neither should.

Configuration


Version

0.55.0

Debug Output


Example Data

No response

Additional Context

No response

References

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Fields

    No fields configured for Bug.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions