centreon-otel-col-log-template/windows-event-log.yaml at main · CentreonLabs/centreon-otel-col-log-template · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
# Copyright 2025-Present Centreon.
# SPDX-License-Identifier: AGPL-3.0-or-later

receivers:
  windowseventlog/application:
    channel: application
    operators:
      - type: severity_parser
        parse_from: body.level
        overwrite_text: true
        mapping:
          fatal:
            - Critical
            - Critique
          error:
            - Error
            - Erreur
          warn:
            - Warning
            - Avertissement
          info:
            - Informational
            - Information
      - type: copy
        from: body.execution.process_id
        to: attributes["process.pid"]
      - type: copy
        from: body.provider.name
        to: resource["custom.event.provider.name"]
      - type: copy
        from: body.provider.guid
        to: resource["custom.event.provider.guid"]
        if: "body.provider.guid != ''"
      - type: copy
        from: body.event_id.id
        to: attributes["custom.event.id"]
      - type: copy
        from: body.record_id
        to: attributes["custom.event.record.id"]
      - type: copy
        from: body.task
        to: attributes["custom.event.task"]
      - type: move
        from: body.message
        to: body
      - type: add
        field: resource["service.version"]
        value: "1.0.0"
      - type: add
        field: resource["service.name"]
        value: "windows-event-log"
      - type: add
        field: resource["service.namespace"]
        value: "application"

service:
  pipelines:
    logs/application:
      receivers: [windowseventlog/application]
      processors: [memory_limiter, resourcedetection, batch]
      exporters: [otlphttp/centreon]