From ff46ec61dd7a32ec8face61d9091d2e2bb2abfbd Mon Sep 17 00:00:00 2001 From: Hal Rottenberg Date: Thu, 5 Sep 2019 23:45:11 -0400 Subject: [PATCH] Removing trailing comma There was a trailing comma in the JSON payload right before the closing brace which caused Splunk's JSON pretty printer to choke. Quick one-byte fix. --- .../splunk-http-event-logger.groovy | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/smartapps/thefuzz4/splunk-http-event-logger.src/splunk-http-event-logger.groovy b/smartapps/thefuzz4/splunk-http-event-logger.src/splunk-http-event-logger.groovy index 52452b6..af6dc17 100644 --- a/smartapps/thefuzz4/splunk-http-event-logger.src/splunk-http-event-logger.groovy +++ b/smartapps/thefuzz4/splunk-http-event-logger.src/splunk-http-event-logger.groovy @@ -191,7 +191,7 @@ json += "\"isPhysical\":\"${evt.isPhysical()}\"," json += "\"location\":\"${evt.location}\"," json += "\"locationId\":\"${evt.locationId}\"," json += "\"unit\":\"${evt.unit}\"," -json += "\"source\":\"${evt.source}\",}" +json += "\"source\":\"${evt.source}\"}" json += "}" //log.debug("JSON: ${json}") def ssl = use_ssl.toBoolean()