


Function Category | Visualization Function Name | Applicable Scenario |
Extract Key Value | Extract fields and field values from JSON nodes. Separator: Extract field values based on the separator. Users are advised to enter the field name. Regular Expression: Extract field values using a regular expression. User input is required for the field name. | log structuring |
Log Processing | Filter Logs: Configure conditions for filtering logs (multiple conditions are in an OR relationship). For example, if field A exists or field B does not exist, filter out the log. Distribute Logs: Configure conditions for distributing logs. For example, distribute logs with status="error" and message containing "404" to topic A. For example, distribute logs with status="running" and message containing "200" to topic B. Retain Logs: Configure conditions for preserving logs. | Delete/Preserve logs |
Process Field | Delete Fields Rename Field | Delete/Rename Field |
{"log": "{\\"offset\\":281,\\"file\\":{\\"path\\":\\"/logs/gate.log\\"}}","message": "2024-10-11 15:32:10.003 DEBUG [gateway3036810e0c33b] ","content":"cls_ETL|1.06s|fields_renamed"}
Visualization Function | Configure Project | Value in Example | Required | Description |
Processing function - JSON | Description | - | No | Fill in your description of the processing function |
| Field | log | Yes | Select the original field to process |
| Prefix of the new field. | - | No | Add a prefix to the extracted new field name |
| New field suffix. | - | No | Add a suffix to the extracted new field name |
| Original field auto-delete | ☑️ | No | Process and delete the original field |
Processing function - Regular | Description | - | No | Fill in your description of the processing function |
| Field | message | Yes | Select the original field to process |
| Regular Expression | (\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}.\\d{3}) ([A-Z]{5}|[A-Z]{4}) \\[(.+)\\] | Yes | Extract as new field dates Extract ([A-Z]{5}|[A-Z]{4}) as new field level Extract [(.+)\\] as new field traceid |
| new field name | dates,level,traceid | Yes | Extract new field using regular expressions |
| Original field auto-delete | ☑️ | No | Process and delete the original field |
Processing function - Separator | Description | - | No | Fill in your description of the processing function |
| Field | content | Yes | Select the original field to process |
| Separator | : | Yes | Split logs into multiple field values |
| new field name | module,delay_time,msg | Yes | New field extracted using a delimiter |
| Original field auto-delete | ☑️ | No | Process and delete the original field |
{"dates":"2024-10-11 15:32:10.003","delay_time":"1.06s","level":"DEBUG","module":"cls_ETL","msg":"fields_renamed","offset":"281","path":"/logs/gate.log","traceid":"gateway3036810e0c33b"}
{"__FILENAME__": "python.log","__SOURCE__": "127.0.0.1","log_level": "ERROR","status": "404","time": "2024-07-21 05:17:30.421"}
Visualization Function | Configure Project | Value in Example | Required | Description |
Processing function - Distribute Logs | Description | - | No | Fill in your description of the processing function |
| Groups | log_level="info" | Yes | Configure your distribution conditions. When conditions are met, logs will be sent to the corresponding log topic. The example shows a log topic named info. |
| Group 2 | log_level="warning" | No | Configure your distribution conditions. When conditions are met, logs will be sent to the corresponding log topic. The example shows a log topic named warning. |
| Group 3 | log_level="error" and status="400" | No | Configure your distribution conditions. When conditions are met, logs will be sent to the corresponding log topic. The example shows a log topic named error. |
Feedback