diff --git a/pipeline/parsers/configuring-parser.md b/pipeline/parsers/configuring-parser.md index 447419142..0231a40b6 100644 --- a/pipeline/parsers/configuring-parser.md +++ b/pipeline/parsers/configuring-parser.md @@ -38,8 +38,8 @@ Multiple parsers can be defined and each section has it own properties. The foll | `Time_Keep` | If enabled, when a time key is recognized and parsed, the parser will keep the original time key. If disabled, the parser will drop the original time field. | | `Time_System_timezone` | If there is no time zone (`%z`) specified in the given `Time_Format`, enabling this option will make the parser detect and use the system's configured time zone. The configured time zone is detected from the [`TZ` environment variable](https://www.gnu.org/software/libc/manual/html_node/TZ-Variable.html). | | `Types` | Specifies the data type of parsed field. The syntax is `types : : ...`. The supported types are `string` (default), `integer`, `bool`, `float`, `hex`. The option is supported by `ltsv`, `logfmt` and `regex`. | -| `Decode_Field` | If the content can be decoded in a structured message, append the structured message (keys and values) to the original log message. Decoder types: `json`, `escaped`, `escaped_utf8`. The syntax is: `Decode_Field `. See [Decoders](pipeline/parsers/decoders.md) for additional information. | -| `Decode_Field_As` | Any decoded content (unstructured or structured) will be replaced in the same key/value, and no extra keys are added. Decoder types: `json`, `escaped`, `escaped_utf8`. The syntax is: `Decode_Field_As `. See [Decoders](pipeline/parsers/decoders.md) for additional information. | +| `Decode_Field` | If the content can be decoded in a structured message, append the structured message (keys and values) to the original log message. Decoder types: `json`, `escaped`, `escaped_utf8`. The syntax is: `Decode_Field `. See [Decoders](decoders.md) for additional information. | +| `Decode_Field_As` | Any decoded content (unstructured or structured) will be replaced in the same key/value, and no extra keys are added. Decoder types: `json`, `escaped`, `escaped_utf8`. The syntax is: `Decode_Field_As `. See [Decoders](decoders.md) for additional information. | | `Skip_Empty_Values` | Specifies a boolean which determines if the parser should skip empty values. The default is `true`. | | `Time_Strict` | The default value (`true`) tells the parser to be strict with the expected time format. With this option set to false, the parser will be permissive with the format of the time. You can use this when the format expects time fraction but the time to be parsed doesn't include it. | @@ -52,19 +52,19 @@ All parsers must be defined in a parsers file (see below for examples), not in t ```yaml parsers: - - name: docker - format: json - time_key: time - time_format: '%Y-%m-%dT%H:%M:%S.%L' - time_keep: on - - - name: syslog-rfc5424 - format: regex - regex: '^\<(?[0-9]{1,5})\>1 (?