Content Modifier
The content_modifier processor allows you to manipulate the messages, metadata/attributes and content of Logs and Traces.
Similar to the functionality exposed by filters, this processor presents a unified mechanism to perform such operations for data manipulation. The most significant difference is that processors perform better than filters, and when chaining them, there are no encoding/decoding performance penalties.
Note that processors and this specific component can only be enabled using the new YAML configuration format. Classic mode configuration format doesn't support processors.
Contexts
The processor, works on top of what we call a context, meaning the place where the content modification will happen. We provide different contexts to manipulate the desired information, the following contexts are available:
Context Name | Signal | Description |
---|---|---|
| Logs | Modify the attributes or metadata of a Log record. |
| Logs | Modify the content of a Log record. |
| Traces | Modify the name of a Span. |
| Traces | Modify the kind of a Span. |
| Traces | Modify the status of a Span. |
| Traces | Modify the attributes of a Span. |
OpenTelemetry Contexts
In addition, we provide special contexts to operate on data that follows an OpenTelemetry Log Schema, all of them operates on shared data across a group of records:
Context Name | Signal | Description |
---|---|---|
| Logs | Modify the attributes of the Log Resource. |
| Logs | Modify the name of a Log Scope. |
| Logs | Modify version of a Log Scope. |
| Logs | Modify the attributes of a Log Scope. |
TIP: if your data is not following the OpenTelemetry Log Schema and your backend or destination for your logs expects to be in an OpenTelemetry schema, take a look at the processor called OpenTelemetry Envelope that you can use in conjunbction with this processor to transform your data to be compatible with OpenTelemetry Log schema.
Configuration Parameters
Key | Description |
---|---|
context | Specify the context where the modifications will happen (more details above).The following contexts are available: |
key | Specify the name of the key that will be used to apply the modification. |
value | Based on the action type, |
pattern | Defines a regular expression pattern. This property is only used by the |
converted_type | Define the data type to perform the conversion, the available options are: |
Actions
The actions specify the type of operation to run on top of a specific key or content from a Log or a Trace. The following actions are available:
Action | Description |
---|---|
| Insert a new key with a value into the target context. The |
| Given a specific key with a value, the |
| Delete a key from the target context. The |
| Change the name of a key. The |
| Replace the key value with a hash generated by the SHA-256 algorithm, the binary value generated is finally set as an hex string representation. The |
| Allows to extact the value of a single key as a list of key/value pairs. This action needs the configuration of a regular expression in the |
| Convert the data type of a key value. The |
Insert example
The following example appends the key color
with the value blue
to the log stream.
Upsert example
Update the value of key1
and insert key2
:
Delete example
Delete key2
from the stream:
Rename example
Change the name of key2
to test
:
Hash example
Apply the SHA-256 algorithm for the value of the key password
:
Extract example
By using a domain address, perform a extraction of the components of it as a list of key value pairs:
Convert example
Both keys in the example are strings. Convert the key1
to a double/float type and key2
to a boolean:
Last updated