mapping graylog message field to datadog tags #2
Description
Hi,
I am Graylog user in Japan.
Great Plugin. Thank you!
but I'm in problem...
I have to mapping graylog message fields to Datadog tags to set datadog event json.
(for filtering event by tags on datadog, and monitoring condition, etc.)
for example
| Plugin Config, graylog message field | datadog json object |
|---|---|
| message.FileName: /var/log/messages | title:'String' + {{PluginConfig.title}} + {{message.FileName}}... |
| message.message: Feb 00 00:00:00 xxx ex: example error message | text:{{stream.description}} + '\n' + {{message.message}}... |
| message.timestamp: timestamp | date_happened:{{message.timestamp}} |
| PluginConfig/priority | priority:{{PluginConfig.priority}} |
| message.source: source_hostname | host:{{message.source}} |
| PluginConfig/tags/[key1:value,key2:{{message.level}}...] | tags:{{PluginConfig/tags/[key1:value1,key2:PluginConfig.value2...]}} |
| PluginConfig/alert_type | alert_type:{{PluginConfig.alert_type}} |
| PluginConfig/aggregation_key | aggregation_key:{{PluginConfig.aggregation_key}} |
| PluginConfig/source_type_name | source_type_name:{{PluginConfig.source_type_name}} |
- set plugin's config value, graylog's message field to datadog's event object
- for tags, plugin configure mapping graylog's message fields(ex: key=message.level). and set it datadog's event tags
Would you enhance plugin?
I would be glad if you so.