fluent-plugin-record-modifier
fluent-plugin-record-modifier copied to clipboard
Fluentd filter plugin for modifying each event record
Hey @repeatedly , I want to redact my value, the key is nested. However, just some record has both 2 level of nested keys. { "**properties**": { "messageTracingId": 12345, "connectionId":...
I am running the Fluentd agent on Windows Server 2016. I also installed the plug-in "fluent-plugin-grafana-loki" to allow me to output messages to loki. I'm attempting to add the hostname...
Given a log recod `{"a": 1, "b":3 }` I would like to transform it to `{"a": 1, "b":3, 'c': { 'd':4, 'e': 5} } ` which is to add a...
Hi! Could you please clarify which encodings char_encoding supports?
I want to add an `api` field to record_modifier, but it doesn't seem to work when I search with Kibana, it reports: >This field is present in your Elasticsearch mapping...
Loving the modifier, I'm trying to work on filtering records which are null adding an if statement, I’ve seen a few examples, but none match my use case. Has anyone...
Hi, I'd like to add time filed in the event, the following example appears to add a string type "formatted_time", but I need a time type field. ``` @type record_modifier...
It looks to me like labels are not being followed. I duplicate my log flow into two streams using labels, and the second label (@EVENTLOG.LOGICMONITOR) does not receive keys which...
fluentd:1.11.2 fluent-plugin-record-modifier:2.1.0 Config: ``` @type record_transformer ecs_container_id "foo-api-#{Socket.gethostname}" @type record_modifier key ecs_container_id expression /.*/ replace foo-api-testing ``` So I create a new field called "ecs_container_id" and set it to "foo-api-#{Socket.gethostname}"...
Is it possible to support multiline code? ``` @type record_modifier somekey ${if !record['field1'].nil?; record['field1']; elsif record['field2'] != ""; record['field2']; else record['somekey']; end;} ``` Currently i get error in fluentd (1.7.2)...