modification de champ

deployment-apps/Splunk_TA_linky/local/props.conf

@@ -1,6 +1,6 @@
 [_json]
-KV_MODE = json
-TRANSFORMS-extract_json = extract_json_fields
+#KV_MODE = json
+#TRANSFORMS-extract_json = extract_json_fields
 TRANSFORMS-rename_date = rename_field_date
 TRANSFORMS-rename_value = rename_field_value
-TRUNCATE = 0
+#TRUNCATE = 0

deployment-apps/Splunk_TA_linky/local/transforms.conf

@@ -1,7 +1,7 @@
-[extract_json_fields]
-REGEX = \"(?<field_name>[^\"]+)\":\s?\"(?<field_value>[^\"]+)\"
-FORMAT = $1::$2
-WRITE_META = true
+#[extract_json_fields]
+#REGEX = \"(?<field_name>[^\"]+)\":\s?\"(?<field_value>[^\"]+)\"
+#FORMAT = $1::$2
+#WRITE_META = true
 
 [rename_field_date]
 REGEX = interval_reading\{\}\.date=(?P<interval_reading\.date>[^\s]+)