[
https://issues.apache.org/jira/browse/CAMEL-16540?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17327098#comment-17327098
]
Claus Ibsen commented on CAMEL-16540:
-------------------------------------
I would like to add some interface that allows to plugin a custom
implementation of what data to send. Then we can have a default implementation
that can do the body only, headers only, or all as today.
Since you pay per data, then users may want to plugin a custom implementation
to filter out some headers (eg only header with keys starting with foo*), and
only include exactly what they want.
> camel-splunk - Include options to only send message body or headers
> -------------------------------------------------------------------
>
> Key: CAMEL-16540
> URL: https://issues.apache.org/jira/browse/CAMEL-16540
> Project: Camel
> Issue Type: Improvement
> Components: camel-splunk-hec
> Reporter: Dillon Gilmore
> Priority: Major
>
> h2. Problem
> splunk-hec always sends the message body and headers under the static json
> keys "body" and "headers" respectively.
> h2. Solution
> Include an option that defaults to the current behavior of sending the body
> and the headers.
> These new options `bodyOnly` and `headersOnly` should send either the body or
> the headers. If both are true then prefer headers. This also removed the need
> to create a map with static keys.
> h2. Rationale
> # Including the headers makes searching more tedious and our queries must
> always be prefixed with `body.`.
> # Splunk charged based off of the amount of data you index. Indexing data
> you don't need can add up an unnecessary bill.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
