Add Fields
CAUTION
This transform has been deprecated in favor of the remap
transform, which enables you to use Vector Remap Language (VRL for short) to
create transform logic of any degree of complexity. The examples below show how you can use VRL to
replace this transform's functionality.
.severity = "crit"
.status = 200
.success_codes = [200, 201, 202, 204]
.timestamp = now()
Configuration Options
Required Options
fields(required)
A table of key/value pairs representing the keys to be added to the event.
| Type | Syntax | Default | Example |
|---|---|---|---|
| hash | [{"string_field":"string value","env_var_field":"${ENV_VAR}","templated_field":"{{ my_other_field }}","int_field":1,"float_field":1.2,"bool_field":true,"timestamp_field":"1979-05-27T00:32:00-0700","parent":{"child_field":"child_value"},"list_field":["first","second","third"]}] |
inputs(required)
A list of upstream source or transform
IDs. Wildcards (*) are supported.
See configuration for more info.
| Type | Syntax | Default | Example |
|---|---|---|---|
| array | literal | ["my-source-or-transform-id","prefix-*"] |
type(required)
The component type. This is a required field for all components and tells Vector which component to use.
| Type | Syntax | Default | Example |
|---|---|---|---|
| string | literal | ["add_fields"] |
Advanced Options
overwrite(optional)
By default, fields will be overridden. Set this to false to avoid overwriting values.
| Type | Syntax | Default | Example |
|---|---|---|---|
| bool |
How it Works
Conflicts
State
This component is stateless, meaning its behavior is consistent across each input.