Concat
This transform has been deprecated in favor of the remap
transform, which enables you to use Vector Remap Language (VRL for short) to
create transform logic of any degree of complexity. The examples below show how you can use VRL to
replace this transform's functionality.
.message = "The severity level is " + .level
Example Configuration
Date
1[transforms.my_transform_id]
2type = "concat"
3joiner = "/"
4target = "date"
5items = [ "month", "day", "year" ]
1{
2 "log": {
3 "message": "Hello world",
4 "month": "12",
5 "day": "25",
6 "year": "2020"
7 }
8}
1{
2 "log": {
3 "message": "Hello world",
4 "date": "12/25/2020",
5 "month": "12",
6 "day": "25",
7 "year": "2020"
8 }
9}
Configuration Options
Required Options
items(required)
A list of substring definitons in the format of source_field[start..end]. For both start and end negative values are counted from the end of the string.
Type | Syntax | Default | Example |
---|---|---|---|
array | literal | ["first[..3]","second[-5..]","third[3..6]"] |
inputs(required)
A list of upstream source or transform
IDs. Wildcards (*
) are supported.
See configuration for more info.
Type | Syntax | Default | Example |
---|---|---|---|
array | literal | ["my-source-or-transform-id","prefix-*"] |
target(required)
The name for the new label.
Type | Syntax | Default | Example |
---|---|---|---|
string | literal | ["root_field_name","parent.child","array[0]"] |
type(required)
The component type. This is a required field for all components and tells Vector which component to use.
Type | Syntax | Default | Example |
---|---|---|---|
string | literal | ["concat"] |
Advanced Options
joiner(optional)
The string that is used to join all items.
Type | Syntax | Default | Example |
---|---|---|---|
string | literal | [" ",",","_","+"] |
How it Works
State
This component is stateless, meaning its behavior is consistent across each input.