You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the above example, we have created a new field called `cluster` and set the value to `k8s.dev`. With this configuration, any logs sent to this Collector will now have this key-value pair associated with it.
84
84
85
-
With this association, you can search for `cluster=k8s.dev` to return your logs.
86
-
87
-

85
+
With this association, you can search for `cluster=k8s.dev` to return your logs. <br/><img src={useBaseUrl('/img/fields/collector-field-search-results.png')} alt="collector-field-search-results" style={{border:'1px solid gray'}} width="800"/>
When creating or editing your HTTP Source that will receive log data add the field `_convertHeadersToFields` with a value of `true`. This field needs to be added to your Fields schema to work.
With this field set on your Source, headers are processed as metadata fields. For example, a cURL command posting data with custom fields would look like:
179
177
@@ -255,16 +253,14 @@ When hovering over a row in the table there are icons that appear on the far ri
255
253
256
254
For the fields listed, select a row to view its details. A details pane appears to the right of the table where you can disable and delete the field.<br/><img src={useBaseUrl('/img/fields/selected-field-details-pane.png')} alt="Manage Fields" style={{border:'1px solid gray'}} width="450"/>
257
255
258
-

259
-
260
256
#### Add field
261
257
262
258
Adding a field will define it in the Fields schema allowing it to be assigned as metadata to your logs.
263
259
264
260
1. Click the **+ Add** button on the top right of the table. A panel named **Add Field** appears to the right of the fields table.
265
261
1. Input a field name and click **Save**.
266
262
267
-

0 commit comments