Attempting to promote an empty stanza can result in the target stanza having content removed. This is undesirable. Likely due to 0.7.9 bug fixed where empty stanzas where previously ignored.
ksconf promote local/eventtypes.conf default -i
-[existing-eventtype]
-search = sourcetype=mysourcetype
+[existing-eventtype]
Apply [existing-eventtype] (y/n) n
+[new-eventtype]
+search = some terms to search for
Apply [new-eventtype] (y/n) n
Note that search = sourcetype=mysourcetype is shown for removal. This is incorrect. If applied, the values from default are removed, just as the preview/diff suggests.
The problem
Attempting to promote an empty stanza can result in the target stanza having content removed. This is undesirable. Likely due to 0.7.9 bug fixed where empty stanzas where previously ignored.
Environment
Details
Steps To Reproduce Issue
Example
local/eventtypes.conf
:Example
default/eventtypes.conf
Command:
Note that
search = sourcetype=mysourcetype
is shown for removal. This is incorrect. If applied, the values from default are removed, just as the preview/diff suggests.