fluent-plugin-record-modifier

fluent-plugin-record-modifier copied to clipboard

#### Problem I'm getting below error while shipping logs to ES via td-agent 1.11.1: ``` 2020-11-01 17:11:42 +0530 [error]: #0 incompatible encoding regexp match (UTF-8 regexp with ASCII-8BIT string) 2020-11-01...

himanshigpta

Question: replace whole record with single field from it

2

I want to use this plugin to catch failed records from Elasticsearch output (e.g. "rejected by Elasticsearch") to put them into "dead-letter" output. Those failed records are emitted as fluent.warn...

nhlushak

Whitelist nested json

3

Hi! Is there any way to whitelist nested keys from a json string? Currently whitelisting top level keys works great but I can not find a way to whitelist nested...

adolia

Hi wondering if the plugin can handle a transformation like ``` { "source": "192.168.29.133", "message": "SESSION,150,1,READ,SELECT,TABLE,public.ce_queue,\"select cq.uuid from ce_queue cq where \n\t cq.status='PENDING' limit $1 offset $2\"," } ``` to...

rverma-jm

Case insensitive replace

2

Hi, Is it possible to perform a case insensitive replace via and expression statement?

filippovdenis

I want to `remove_keys log` and use `${record} = ${record['log']}` is this possible?

markuman

``` @type tail @type json path /var/log/containers/kube-dns* path_key path pos_file /var/log/es-kubernetes.pos tag k8s @type parser key_name path reserve_data true remove_key_name_field true @type regexp expression /^.*kube-(?.+)-(master|slave).*/ @type record_modifier Payload ${record['log']} whitelist_keys...

xidiandb

how to convert type of value in the new field?

1

hi I use this plugin to create a new key (or a new field),the value is "123",how can I get a integer 123?as I output it to EFK stack for...

zffocussss

Hi @repeatedly, Thanks for the plugin! I have a Syslog input and I'd like to add extra fields from Docker API: In the current form, it won't be optimized as...

scalp42

I use replace \\k/\\k in the configuration file. but in kibana it still show \k\k

zffocussss