Live Workshop: Integrate Google SecOps with Bindplane - Join Us on January 29th at 11 AM ET!Sign Up Now

Copy Field

Description

The Copy Field processor can be used to copy telemetry from one field to another.

Use

The Copy Field processor is utilized for copying telemetry fields in metrics, logs, and traces based on specified conditions.

Supported Types

MetricsLogsTraces

Configuration

FieldDescription
Telemetry TypesThe types of telemetry to apply the processor to.
ConditionA condition that determines when this processor is applied.
Copy FromThe telemetry field to copy from.
Copy ToThe telemetry field to copy to.

Example Configuration(s)

Copying An Entire Log Body

In this configuration, the entire body field is copied to a field on attributes called body_nested. This method is useful for destinations that ignore or use the body field in an undesired manner.

Web Interface

observIQ docs - Copy Plain Field

Nesting A Field

This configuration will nest a resource attributes field named host.name within an attributes field named simply name that is nested under a top level attributes field named host. This is useful for simplifying or standardizing the data structure of incoming logs. In this example, note the use of bracket notation to create nested fields.

Web Interface

observIQ docs - Copy Nested Field