Live Workshop: Integrate Google SecOps with Bindplane - Join Us on January 29th at 11 AM ET!Sign Up Now

Group by Attributes

MetricsLogsTracesBindPlane Agent
v1.0.0+

Description

The Group by Attributes Processor groups telemetry with shared attribute values into the same resource.

Use

  1. "Promote" attributes so telemetry with those attributes gets grouped under a resource of that value.
  2. Compact telemetry data that shares a resource after batching.

Configuration

FieldDescription
Telemetry TypesThe types of telemetry to apply the processor to.
Attribute KeysThe attribute keys to group by and move to the resource. When no keys are specified, resources with the same attributes are compacted into the one resource.

Example Configurations

1. Promote an attribute

An example of promoting the user attribute on logs:

observIQ docs - Group by Attributes - image 1

Before processor:

observIQ docs - Group by Attributes - image 2

After:

observIQ docs - Group by Attributes - image 3

2. Compact telemetry with the same resource

By default, the processor will compact telemetry that shares the same resource. Using this processor after the batch processor can reduce the amount of data sent to some destinations.

observIQ docs - Group by Attributes - image 4