Update props.conf

Add TRUNCATE value to github_json because the default 10k isn't enough since some workflow events can top 20k. Set to 100k to account for extra large events.

Author: derkkila

github_app_for_splunk/default/props.conf

@@ -57,6 +57,7 @@ EVAL-issue_tags = if(isnotnull('issue.labels{}.name'), 'issue.labels{}.name', nu
 EVAL-repository_organization = if(isnotnull('organization.login'), 'organization.login', null())
 EVAL-current_priority = if('issue.labels{}.name' like "Priority%", mvfilter(match('issue.labels{}.name', "[pP]riority:\sLow|[pP]riority:\sHigh|[pP]riority:\sMedium")), null())
 FIELDALIAS-user = actor AS user
+TRUNCATE = 100000
 
 [github_audit]
 KV_MODE = JSON