Replies: 4 comments 1 reply
-
Hey! |
Beta Was this translation helpful? Give feedback.
-
Hello @jszwedko, are these fields automatically added by vector? The event/log that was sent by an upstream instance of vector did not have these fields. |
Beta Was this translation helpful? Give feedback.
-
Just to update on configurations, we are running an instance at agent which collects logs from other applications through http, tcp, unix and sends it to other instance at collector through sink type vector. While receiving logs at agent we are not receiving source_type and timestamp but still it is appended in logs while sending it to collector. Please find below example, Do let us know how to exclude source_type, timestamp fields. |
Beta Was this translation helpful? Give feedback.
-
We have found the reason why it was not working. del() function is now working. We tried to add in collector instance and it worked. Previously we were modifying at agent before sending. I am closing this comment. Thanks for helping. |
Beta Was this translation helpful? Give feedback.
-
Hi Team,
I tried to use del(.field1) as mentioned in VRL examples but was not able to delete timestamp and source_type fields. I am also validating JSON format in the .vrl files which seems correct.
Kindly suggest on how to remove these parameters. I am using vector version 0.32.0
Beta Was this translation helpful? Give feedback.
All reactions