|
Something's up with the batch processor. I send the following file to a sink and it doesn't set any of the metadata fields as it used to previously. Also documented at http://www.splunk.com/base/Documentation/latest/Data/Assignmetadatatoeventsdynamically dummy.log Subsequent processing of props and transforms don't event happen. The event get's indexed as if I never specified the header. Fails on a fresh Splunk 4.2.2 (build 101277) on Windows 7 64bit but works Splunk 4.1.7 (build 95063). PS I noticed another post with a similar problem http://splunk-base.splunk.com/answers/9110/batch-input-doesnt-honor-line_breaker-settings |
One Answer: