README
¶
Move plugin
It moves fields to the target field in a certain mode.
In
allowmode, the specifiedfieldswill be moved; inblockmode, the unspecifiedfieldswill be moved.
Examples
pipelines:
example_pipeline:
...
actions:
- type: move
mode: allow
target: other
fields:
- log.stream
- zone
...
The original event:
{
"service": "test",
"log": {
"level": "error",
"message": "error occurred",
"ts": "2023-10-30T13:35:33.638720813Z",
"stream": "stderr"
},
"zone": "z501"
}
The resulting event:
{
"service": "test",
"log": {
"level": "error",
"message": "error occurred",
"ts": "2023-10-30T13:35:33.638720813Z"
},
"other": {
"stream": "stderr",
"zone": "z501"
}
}
pipelines:
example_pipeline:
...
actions:
- type: move
mode: block
target: other
fields:
- log
...
The original event:
{
"service": "test",
"log": {
"level": "error",
"message": "error occurred",
"ts": "2023-10-30T13:35:33.638720813Z",
"stream": "stderr"
},
"zone": "z501",
"other": {
"user": "ivanivanov"
}
}
The resulting event:
{
"log": {
"level": "error",
"message": "error occurred",
"ts": "2023-10-30T13:35:33.638720813Z"
},
"other": {
"user": "ivanivanov",
"service": "test",
"zone": "z501"
}
}
Config params
fields []cfg.FieldSelector required
The list of the fields to move.
In
blockmode, the maximumfieldsdepth is 1.
mode string required
The mode of the moving. Available modes are one of: allow|block.
target cfg.FieldSelector required
The target field of the moving.
If the
targetfield is existing non-object field, it will be overwritten as object field.
In
blockmode, the maximumtargetdepth is 1.
Generated using insane-doc
Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Config ¶
type Config struct {
// > @3@4@5@6
// >
// > The list of the fields to move.
// >> In `block` mode, the maximum `fields` depth is 1.
Fields []cfg.FieldSelector `json:"fields" slice:"true" required:"true"` // *
// > @3@4@5@6
// >
// > The mode of the moving. Available modes are one of: `allow|block`.
Mode string `json:"mode" required:"true"` // *
// > @3@4@5@6
// >
// > The target field of the moving.
// >> If the `target` field is existing non-object field, it will be overwritten as object field.
// >
// >> In `block` mode, the maximum `target` depth is 1.
Target cfg.FieldSelector `json:"target" parse:"selector" required:"true"` // *
Target_ []string
}
! config-params ^ config-params
Source Files