fix: Update sourcetype for traps

splunk · Feb 2, 2021 · 739528e · 739528e
1 parent 440b7f5
commit 739528e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/splunk_connect_for_snmp_traps/manager/trap_server.py b/splunk_connect_for_snmp_traps/manager/trap_server.py
@@ -66,7 +66,7 @@ def post_trap_to_hec(self, variables_binds):
             splunk_trap_data = ",".join(
                 [str(key) + str(value) for key, value in variables_binds]
             )
-            data = {"sourcetype": "trap-server", "event": splunk_trap_data}
+            data = {"sourcetype": "sc4snmp:trap", "event": splunk_trap_data}
             logger.debug(
                 f"Posting trap to HEC using {endpoint} and tlsmode {self._hec_config.is_ssl_enabled}"
             )