@@ -98,13 +98,15 @@ transform/kvm_monitoring:
9898 - attributes["log.type"] == "files-kvm-monitoring"
9999 statements:
100100 - merge_maps(log.attributes, ExtractPatterns(log.body, "level=(?P<loglevel>\\w+) msg=\"(?P<msg>[^\"]+)"), "upsert")
101- - merge_maps(log.attributes, ExtractPatterns(log.body, "domain=(?P<domain >\\S+)"), "upsert")
101+ - merge_maps(log.attributes, ExtractPatterns(log.body, "domain=(?P<domainid >\\S+)"), "upsert")
102102 - merge_maps(log.attributes, ExtractPatterns(log.body, "runID=(?P<runID>\\S+)"), "upsert")
103103 - merge_maps(log.attributes, ExtractPatterns(log.body, "service_env=(?P<service_env>\\S+)"), "upsert")
104104 - merge_maps(log.attributes, ExtractPatterns(log.body, "service_name=(?P<service_name>\\S+)"), "upsert")
105105 - merge_maps(log.attributes, ExtractPatterns(log.body, "collector=\"(?P<collector>[^\"]+)"), "upsert")
106106 - set(attributes["log.level"], attributes["loglevel"])
107107 - delete_key(attributes, "loglevel")
108+ - set(attributes["domain.id"], attributes["domainid"])
109+ - delete_key(attributes, "domainid")
108110 - set(log.attributes["config.parsed"], "kvm_monitoring") where log.attributes["log.level"] != nil
109111 - set(log.observed_time, Now())
110112 - set(log.time, log.observed_time)
0 commit comments