Merge pull request #18 from splunk/rfaircloth-splunk-patch-1

feat(meta): Add meta sourcetype

Author: Ryan Faircloth

package/default/props.conf

@@ -14,4 +14,17 @@ ANNOTATE_PUNCT = false
 
 DATETIME_CONFIG=CURRENT
 
-REPORT-fields = ta_sc4snmp_trap
+REPORT-fields = ta_sc4snmp_kv
+
+[sc4snmp:meta]
+pulldown_type = 0
+NO_BINARY_CHECK = 1
+SHOULD_LINEMERGE = false
+KV_MODE = NONE
+LEARN_SOURCETYPE = false
+LEARN_MODEL = false
+ANNOTATE_PUNCT = false
+
+DATETIME_CONFIG=CURRENT
+
+REPORT-fields = ta_sc4snmp_kv

package/default/transforms.conf

@@ -3,5 +3,5 @@
 ## SPDX-License-Identifier: LicenseRef-Splunk-1-2020
 ##
 ##
-[ta_sc4snmp_trap]
+[ta_sc4snmp_kv]
 REGEX = (?:^| )(?<_KEY_1>[^=]*)=(?! )(?<_VAL_1>.+?)(?=(?: [^ ]*(?<!\\)=|$))