Join Template plugin

Alias to join plugin with predefined fast (regexes not used) start and continue checks. Use do_if or match_fields to prevent extra checks and reduce CPU usage.

Example of joining Go panics:

pipelines:
  example_pipeline:
    ...
    actions:
      - type: join_template
        template: go_panic
        field: log
        do_if:
          field: stream
          op: equal
          values:
            - stderr # apply only for events which was written to stderr to save CPU time
    ...

Config params

field cfg.FieldSelector default=log required

The event field which will be checked for joining with each other.

max_event_size int default=0

Max size of the resulted event. If it is set and the event exceeds the limit, the event will be truncated.

template string

The name of the template. Available templates: go_panic, cs_exception, go_data_race. Deprecated; use templates instead.

templates []string

Names of templates. Available templates: go_panic, cs_exception, go_data_race.

Generated using insane-doc