Add ShutUp10, Upgrade Vagrant, Issue 12

2019-02-18 21:47:03 -08:00
parent a110e51856
commit 020af3c936
11 changed files with 168 additions and 13 deletions
--- a/Vagrant/resources/splunk_server/props.conf
+++ b/Vagrant/resources/splunk_server/props.conf
@@ -1,14 +1,14 @@
 [source::WinEventLog:*]
 TRANSFORMS-host = wef_computername_as_host

-[sourcetype::powershell_transcript]
-TRANSFORMS-powershell_rename_host = powershell_rename_host
-
 [powershell_transcript]
-BREAK_ONLY_BEFORE = THISREGEXDOESNTEXIST
+TRANSFORMS-powershell_rename_host = powershell_rename_host
+SHOULD_LINEMERGE = false
+LINE_BREAKER = ([\r\n]+)THISDOESNTEXIST
 DATETIME_CONFIG =
 NO_BINARY_CHECK = true
 TIME_FORMAT = %Y%m%d%H%M%S
-TIME_PREFIX = Start\stime\:\s
+TIME_PREFIX = Start time:\s
 category = Custom
 pulldown_type = true
+TRUNCATE = 0