I am pushing gatling simulation.log into splunk for reporting and analysis.
I have added regex expressions to extract the individual fields of a record.
I used the record descriptions from this SOF question:
Which defines the record format as:
[scenario][userId][recordType][groupHierarchy][name][first/last byte sent timestamp][first/last byte received timestamp][status][extraInfo]
This maps correctly for ‘REQUEST’ record types, but for USER record types there is a missing field (based on the number of tab delimeters), either [groupHierarchy] or [name]
Is the format for USER records intentionally different or is this a bug?