Skip to content

Latest commit

 

History

History
17 lines (12 loc) · 539 Bytes

transformers.md

File metadata and controls

17 lines (12 loc) · 539 Bytes

What Is a Transformer?

A Transformer is a VRL script used to transform a log record into another.

They are used to parse, refine, and enrich log records within a pipeline.

A common use case is to parse log records comming from syslog:

. = parse_syslog!(.message)
.

The above script expects a record with a single field message, containing text in the syslog format. After processing, the resulting record will have fields such as program, timestamp, or hostname.