search

Financial-Times / splunk-heroku

Support for Heroku log drains packaged as a Splunk app.
https://tech.in.ft.com/tech-topics/logging/splunk/logging-from-heroku
MIT License
2 stars 0 forks source link

The nullQueue transform is not working #23

Closed sjparkinson closed 2 years ago

sjparkinson commented 2 years ago

We're seeing successful /__health requests in Splunk.

Screenshot 2022-06-13 at 12 59 30

I suspect this is because the transform is not on the incoming source type, it seems with the applied source types like heroku_requests transforms etc. are not applied as you might expect.

Worth looking at moving this up to the heroku source type to try and resolve this issue.

https://github.com/Financial-Times/splunk-heroku/blob/3b14627adb5428caed353c7c5aaf8350bbfc32e7/app/default/props.conf#L35-L36