Transforms

Parse, structure, and transform events

Transforms are in the middle of the pipeline, sitting in-between sources and sinks. They transform events or the stream as a whole.

Name

Description

add_fields

Accepts log events and allows you to add one or more log fields.

add_tags

Accepts metric events and allows you to add one or more metric tags.

coercer

Accepts log events and allows you to coerce log fields into fixed types.

field_filter

Accepts log and metric events and allows you to filter events by a log field's value.

grok_parser

Accepts log events and allows you to parse a log field value with Grok.

json_parser

Accepts log events and allows you to parse a log field value as JSON.

log_to_metric

Accepts log events and allows you to convert logs into one or more metrics.

lua

Accepts log events and allows you to transform events with a full embedded Lua engine.

regex_parser

Accepts log events and allows you to parse a log field's value with a Regular Expression.

remove_fields

Accepts log events and allows you to remove one or more log fields.

remove_tags

Accepts metric events and allows you to remove one or more metric tags.

sampler

Accepts log events and allows you to sample events with a configurable rate.

split

Accepts log events and allows you to split a field's value on a given separator and zip the tokens into ordered field names.

tokenizer

Accepts log events and allows you to tokenize a field's value by splitting on white space, ignoring special wrapping characters, and zip the tokens into ordered field names.

+ request a new transform