Concat

CAUTION

This transform has been deprecated in favor of the remap transform, which enables you to use Vector Remap Language (VRL for short) to create transform logic of any degree of complexity. The examples below show how you can use VRL to replace this transform's functionality.

.message = "The severity level is " + .level

Example Configuration

Date

Config
Input
Output
1[transforms.my_transform_id]
2type = "concat"
3joiner = "/"
4target = "date"
5items = [ "month", "day", "year" ]
1{
2 "log": {
3 "message": "Hello world",
4 "month": "12",
5 "day": "25",
6 "year": "2020"
7 }
8}
1{
2 "log": {
3 "message": "Hello world",
4 "date": "12/25/2020",
5 "month": "12",
6 "day": "25",
7 "year": "2020"
8 }
9}

Configuration Options

Required Options

items(required)

A list of substring definitons in the format of source_field[start..end]. For both start and end negative values are counted from the end of the string.

TypeSyntaxDefaultExample
arrayliteral["first[..3]","second[-5..]","third[3..6]"]
inputs(required)

A list of upstream source or transform IDs. Wildcards (*) are supported.

See configuration for more info.

TypeSyntaxDefaultExample
arrayliteral["my-source-or-transform-id","prefix-*"]
target(required)

The name for the new label.

TypeSyntaxDefaultExample
stringliteral["root_field_name","parent.child","array[0]"]
type(required)

The component type. This is a required field for all components and tells Vector which component to use.

TypeSyntaxDefaultExample
stringliteral["concat"]

Advanced Options

joiner(optional)

The string that is used to join all items.

TypeSyntaxDefaultExample
stringliteral [" ",",","_","+"]

How it Works

State

This component is stateless, meaning its behavior is consistent across each input.