splunk / eventgen

Splunk Event Generator: Eventgen
Apache License 2.0
376 stars 180 forks source link

[FEATURE/IMPROVEMENT] Set default source based on sample file name #394

Closed jmeixensperger closed 4 years ago

jmeixensperger commented 4 years ago

Is your feature request related to a problem? Please describe. I want my event 'source' to contain the sample file name, but hard-coding each file name / maintaining a conf stanza for each file is inefficient.

Describe the solution you'd like I want eventgen to use the sample file name by default.

Describe alternatives you've considered Passing a special string / additional option to enable this feature, although the current default 'eventgen' source can still be used by adding the option in your eventgen.conf.

Additional context cc @rfaircloth-splunk feel free to elaborate