Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: remove dissect dynamic key names #1176

Merged
merged 2 commits into from
Sep 6, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 4 additions & 6 deletions docs/user-guide/logs/pipeline-config.md
Original file line number Diff line number Diff line change
Expand Up @@ -118,7 +118,7 @@ In the above example, the configuration of the `dissect` processor includes the
Similar to Logstash's dissect pattern, the dissect pattern consists of `%{key}`, where `%{key}` is a field name. For example:

```
"%{key1} %{key2} %{+key3} %{+key4/2} %{key5->} %{?key6} %{*key7} %{&key8}"
"%{key1} %{key2} %{+key3} %{+key4/2} %{key5->} %{?key6}"
```

#### Dissect modifiers
Expand All @@ -131,20 +131,19 @@ The dissect pattern supports the following modifiers:
| `+` and `/n` | Concatenates two or more fields in the specified order | `%{+key/2} %{+key/1}` |
| `->` | Ignores any repeating characters on the right side | `%{key1->} %{key2->}` |
| `?` | Ignores matching values | `%{?key}` |
| `*` and `&` | Sets the output key as \* and the output value as & | `%{*key} %{&key}` |

#### `dissect` examples

For example, given the following log data:

```
"key1 key2 key3 key4 key5 key6 key7 key8"
"key1 key2 key3 key4 key5 key6"
```

Using the following Dissect pattern:

```
"%{key1} %{key2} %{+key3} %{+key3/2} %{key5->} %{?key6} %{*key} %{&key}"
"%{key1} %{key2} %{+key3} %{+key3/2} %{key5->} %{?key6}"
```

The result will be:
Expand All @@ -154,8 +153,7 @@ The result will be:
"key1": "key1",
"key2": "key2",
"key3": "key3 key4",
"key5": "key5",
"key7": "key8"
"key5": "key5"
}
```

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -120,7 +120,7 @@ processors:
和 Logstash 的 Dissect 模式类似,Dissect 模式由 `%{key}` 组成,其中 `%{key}` 为一个字段名。例如:

```
"%{key1} %{key2} %{+key3} %{+key4/2} %{key5->} %{?key6} %{*key7} %{&key8}"
"%{key1} %{key2} %{+key3} %{+key4/2} %{key5->} %{?key6}"
```

#### Dissect 修饰符
Expand All @@ -133,20 +133,19 @@ Dissect 模式支持以下修饰符:
| `+` 和 `/n` | 按照指定的顺序将两个或多个字段追加到一起 | `%{+key/2} %{+key/1}` |
| `->` | 忽略右侧的任何重复字符 | `%{key1->} %{key2->}` |
| `?` | 忽略匹配的值 | `%{?key}` |
| `*` 和 `&` | 将输出键设置为 \*,输出值设置为 &。 | `%{*key} %{&key}` |

#### `dissect` 示例

例如,对于以下 log 数据:

```
"key1 key2 key3 key4 key5 key6 key7 key8"
"key1 key2 key3 key4 key5 key6"
```

使用以下 Dissect 模式:

```
"%{key1} %{key2} %{+key3} %{+key3/2} %{key5->} %{?key6} %{*key} %{&key}"
"%{key1} %{key2} %{+key3} %{+key3/2} %{key5->} %{?key6}"
```

将得到以下结果:
Expand All @@ -156,8 +155,7 @@ Dissect 模式支持以下修饰符:
"key1": "key1",
"key2": "key2",
"key3": "key3 key4",
"key5": "key5",
"key7": "key8"
"key5": "key5"
}
```

Expand Down
Loading