Added SampleLabel parsing, which can be used to send custom fields to ElasticSearch. #95
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
It uses SampleLabel which is split by delimiter (default is “_”) and then for each split value it adds key-value pairs based on second delimiter (default is “:”).
Example:
SampleLabel "Id:01_Transaction:Login" is split by delimiter “_” as
which is then split as key-value pairs by delimiter “:”
and sent to ElasticSearch.
There are 3 new settings for the plugin:
es.parse.samplelabel – turn on and off SampleLabel parsing (default is off)
es.parse.samplelabel.delimiter – delimiter for splitting each parameter
es.parse.samplelabel.keyvalue.delimiter – delimiter for splitting key-value pairs from parameter