seqcli
seqcli copied to clipboard
Support ingesting json as produced by JsonFormatter
As the title states: I recently had to ingest some log files written by the (old) JsonFormatter. But apparently that is not a supported scenario yet. I think such a feature would be worthwhile.
As a side note: Naming the ingestion argument --json seems bit misleading to me, as the data must follow the clef-schema and cannot be just any odd json.
Thanks for the suggestion. The intention is that --json should at some point (hopefully soon!) support field name mappings, e.g. to map Timestamp to the timestamp field, and so-on.
Ingesting the classic Serilog JSON format would make a good capability test for this 👍
I wonder if we could achieve this using something like Seq's expression syntax to "construct" a CLEF document based on whatever the input JSON is?
I.e. (incomplete example):
--map="{@t: Timestamp, @mt: MessageTemplate, @l: Level, @x: Exception, ..Properties}"
🤔