Hello,
I am unable to view the statedump of my parser code.
Raw log is as follows:
"resource": {
"type": "k8s_container",
"labels": {
"container_name": "abc",
"namespace_name": "default",
"location": "us-central",
"project_id": "xyz",
"cluster_name": "test-cluster",
}
}
The following is my parser code with the statedump:
filter {
json {
source => "message"
array_function => "split_columns"
}
for key, value in resource.labels map {
mutate {
replace => {
"test.key" => "%{key}"
"test.value" => "%{value}"
}
}
statedump {}
}
}
Where am i going wrong?
Can anyone please help me with this. Where am i going wrong here?
User | Count |
---|---|
3 | |
2 | |
1 | |
1 | |
1 |