chore(splunk hec): add semantic meaning for Vector log namespace

vectordotdev · Apr 12, 2024 · 5a19125 · 5a19125
1 parent f1439bc
commit 5a19125
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/sources/splunk_hec/mod.rs b/src/sources/splunk_hec/mod.rs
@@ -33,6 +33,7 @@ use vector_lib::{
     EstimatedJsonEncodedSizeOf,
 };
 use vector_lib::{configurable::configurable_component, tls::MaybeTlsIncomingStream};
+use vrl::path::OwnedTargetPath;
 use vrl::value::{kind::Collection, Kind};
 use warp::{filters::BoxedFilter, path, reject::Rejection, reply::Response, Filter, Reply};
 
@@ -226,7 +227,8 @@ impl SourceConfig for SplunkConfig {
             LogNamespace::Vector => vector_lib::schema::Definition::new_with_default_metadata(
                 Kind::bytes().or_object(Collection::empty()),
                 [log_namespace],
-            ),
+            )
+            .with_meaning(OwnedTargetPath::event_root(), meaning::MESSAGE),
         }
         .with_standard_vector_source_metadata()
         .with_source_metadata(