How to add content to the log

[uglyliu]

My config is as followers:

data_dir = "/data/svr/vector/data"
timezone = "local"

[api]
enabled = false
address = "[::]:8687"
playground = false

[sources.vector]
type = "vector"
address = "0.0.0.0:8688"
version = "2"

[sources.internal_metrics]
type = "internal_metrics"

[transforms.trans1]
type = "remap"
inputs = [ "vector" ]
source = """
.service = split!(.file, "/")[3]
.timestamp = now()
.unix_time = to_int!(format_timestamp!(.timestamp, format: "%s"))
.utc8_time = .unix_time + 28800
.t = from_unix_timestamp!(.utc8_time, unit: "seconds")
.log_file_ts = format_timestamp!(.t, format: "%Y.%m.%d")"""

[transforms.filter1]
type = "filter"
inputs = [ "trans1" ]

  [transforms.filter1.condition]
  type = "vrl"
  source = 'starts_with!(.message, "WARN") || starts_with!(.message, "ERROR") || starts_with!(.message, "FATAL") || contains!(.file, "_err.log")'

[sinks.prom_exporter]
type = "prometheus_exporter"
inputs = [ "internal_metrics" ]
address = "[::]:9091"

[sinks.allfile]
type = "file"
inputs = [ "trans1" ]
path = "/log-s3/{{ service }}/{{ host }}/{{ service }}-{{ log_file_ts }}.log"

  [sinks.allfile.encoding]
  codec = "text"

[sinks.errfile]
type = "file"
inputs = [ "filter1" ]
path = "/log-s3/{{ service }}/{{ host }}/{{ service }}-error-{{ log_file_ts }}.log"

  [sinks.errfile.encoding]
  codec = "text"

[sinks.stdout]
type = "console"
inputs = [ "filter1" ]

  [sinks.stdout.encoding]
  codec = "json"

My source log is

2024-03-12 20:48:15.287   INFO   360 --- [           Thread-47] cddfrgrgafafa: XXXXXXXX accountType=35

My question is how to add a field to the log，for example, the effect I want is as follows

2024-03-12 20:48:15.287  pod_ip=172.16.2.2  host_ip=172.23.2.2   INFO   360 --- [           Thread-47] cddfrgrgafafa: XXXXXXXX accountType=35

[jszwedko]

Hi @uglyliu , you can modify the .message field.

[uglyliu]

Can you provide some configuration, thank you very much

[jszwedko]

Sure, something like: .message = "foo " + .message to prepend.