| description | Parse, structure, and transform events |
|---|
Transforms are in the middle of the pipeline, sitting in-between sources and sinks. They transform events or the stream as a whole.
| Name | Description |
|---|---|
add_fields |
Accepts log events and allows you to add one or more log fields. |
add_tags |
Accepts metric events and allows you to add one or more metric tags. |
coercer |
Accepts log events and allows you to coerce log fields into fixed types. |
field_filter |
Accepts log and metric events and allows you to filter events by a log field's value. |
grok_parser |
Accepts log events and allows you to parse a log field value with Grok. |
json_parser |
Accepts log events and allows you to parse a log field value as JSON. |
log_to_metric |
Accepts log events and allows you to convert logs into one or more metrics. |
lua |
Accepts log events and allows you to transform events with a full embedded Lua engine. |
regex_parser |
Accepts log events and allows you to parse a log field's value with a Regular Expression. |
remove_fields |
Accepts log events and allows you to remove one or more log fields. |
remove_tags |
Accepts metric events and allows you to remove one or more metric tags. |
sampler |
Accepts log events and allows you to sample events with a configurable rate. |
split |
Accepts log events and allows you to split a field's value on a given separator and zip the tokens into ordered field names. |
tokenizer |
Accepts log events and allows you to tokenize a field's value by splitting on white space, ignoring special wrapping characters, and zip the tokens into ordered field names. |