Skip to content

Multiple Decode_Field_as in Parser in YAML format config #9717

Answered by allewell
heejew asked this question in Q&A
Discussion options

You must be logged in to vote

I'm not sure, but have you tried duplicating it? :

decode_field_as: escaped message try_next 
decode_field_as: json message 

That works in some places (eg rewrite_tag filter:)

    - name: rewrite_tag
      match: something
      rule: '$log  "java\.lang\.OutOfMemoryError"  critical_events_temp_1  true'
      rule: '$log  "java\.lang\.StackOverflowError"  critical_events_temp_2  true'

But not let's say in tail input path, which is comma delimited:

  inputs:
    - name: tail
      path: >-
        some_path/atlassian-jira.log*,
        some_path/atlassian-jira-stats.log*

Replies: 1 comment 1 reply

Comment options

You must be logged in to vote
1 reply
@heejew
Comment options

Answer selected by heejew
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants