Open jwimmersplk opened 3 years ago
@jwimmersplk There is no .Values.splunk_hec.sourcetype
setting in this chart. Please use .Values.splunkPlatform.sourcetype
instead
Oops wrong value, sorry about that. That .Values.splunkPlatform.sourcetype
does get overwritten from a customers perspective by the metadata resource operation.
Customer today expected that if he were to add a sourcetype value to the .Values.splunkPlatform.sourcetype
, that would be the default but that isn't the case from what I am seeing.
The sourcetype set in the Values.splunk_hec.sourcetype is getting overwritten by the resource com.splunk.sourcetype even if it is set. As a user, I would expect the sourcetype set in values to get used if it is not null and there are no other annotations assigned to either the pod or the namespace.