All Apps and Add-ons

How to only get the message body from JMS Messaging Modular Input?

roneng
New Member

Hello,
I started using JMS Messaging Modular Input. I send a message to a jms queue that have the body: key1="a" key2="b".
The JMS Messaging Modular Input generate a splunk event that looks like:
Sun JUL 15 10:545:44 2018 name=QUEUE_msg_received event_id=ID:<...> msg_dest=jms/splunk/test msg_body=key1="a" key2="b".
I want that the splunk event will have only the msg_body value (i.e: key1="a" key2="b") and not the other things, any ideas how to configure it?
the "Index messaged header field" checkbox is UNCHECKED.

thanks,
Ronen

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

Declare a built in custom message handler , com.splunk.modinput.jms.custom.handler.BodyOnlyMessageHandler

alt text

View solution in original post

0 Karma

Damien_Dallimor
Ultra Champion

Declare a built in custom message handler , com.splunk.modinput.jms.custom.handler.BodyOnlyMessageHandler

alt text

0 Karma
Get Updates on the Splunk Community!

Customer Experience | Splunk 2024: New Onboarding Resources

In 2023, we were routinely reminded that the digital world is ever-evolving and susceptible to new ...

Celebrate CX Day with Splunk: Take our interactive quiz, join our LinkedIn Live ...

Today and every day, Splunk celebrates the importance of customer experience throughout our product, ...

How to Get Started with Splunk Data Management Pipeline Builders (Edge Processor & ...

If you want to gain full control over your growing data volumes, check out Splunk’s Data Management pipeline ...