(fleet/alloy) add labels to antu

Author: csilva-cl

fleet/lib/alloy/overlays/antu/values.yaml

@@ -117,6 +117,20 @@ alloy:
             job = "k8s/logs",
           }
         }
+
+        stage.json {
+          expressions = { level = "level" }
+        }
+        stage.template {
+          source = "level"
+          template = "{{`{{ lower .Value }}`}}"
+        }
+        stage.labels {
+          values = {
+            severity = "level",
+          }
+        }
+
         forward_to = [loki.write.send.receiver]
       }
 
@@ -130,12 +144,16 @@ alloy:
 
       loki.process "cluster_events" {
         forward_to = [loki.write.send.receiver]
+        stage.static_labels {
+          values = {
+            cluster = "${ get .ClusterLabels "management.cattle.io/cluster-display-name" }",
+          }
+        }
         stage.regex {
           expression = ".*name=(?P<name>[^ ]+).*kind=(?P<kind>[^ ]+).*objectAPIversion=(?P<apiVersion>[^ ]+).*type=(?P<type>[^ ]+).*"
         }
         stage.labels {
           values = {
-            kubernetes_cluster_events = "job",
             name                      = "name",
             kind                      = "kind",
             apiVersion                = "apiVersion",
@@ -154,6 +172,11 @@ alloy:
                 source_labels = ["__syslog_message_app_name"]
                 target_label  = "app_name"
         }
+        rule {
+          source_labels = ["__syslog_connection_ip"]
+          action        = "replace"
+          target_label  = "host_ip"
+        }
       }
 
       loki.source.syslog "tcp" {