Transforms

Parse, structure, and transform events

Transforms are in the middle of the pipeline, sitting in-between sources and sinks. They transform events or the stream as a whole.

Name

Description

add_fields

Accepts log events and allows you to add one or more fields.

coercer

Accepts log events and allows you to coerce event fields into fixed types.

field_filter

Accepts log and metric events and allows you to filter events by a field's value.

grok_parser

Accepts log events and allows you to parse a field value with Grok.

json_parser

Accepts log events and allows you to parse a field value as JSON.

log_to_metric

Accepts log events and allows you to convert logs into one or more metrics.

lua

Accepts log events and allows you to transform events with a full embedded Lua engine.

regex_parser

Accepts log events and allows you to parse a field's value with a Regular Expression.

remove_fields

Accepts log and metric events and allows you to remove one or more event fields.

sampler

Accepts log events and allows you to sample events with a configurable rate.

tokenizer

Accepts log events and allows you to tokenize a field's value by splitting on white space, ignoring special wrapping characters, and zipping the tokens into ordered field names.

+ request a new transform