Skip to content
v2.274.0

ParserProcessorProps Struct ​

Properties for creating configurable parser processors.

Example ​

ts

// Create a log group
const logGroup = new logs.LogGroup(this, 'MyLogGroup');

// Create a JSON parser processor
const jsonParser = new logs.ParserProcessor({
  type: logs.ParserProcessorType.JSON
});

// Create a processor to add keys
const addKeysProcessor = new logs.JsonMutatorProcessor({
  type: logs.JsonMutatorType.ADD_KEYS,
  addKeysOptions: {
    entries: [{
      key: 'metadata.transformed_in',
      value: 'CloudWatchLogs'
    }]
  }
});

// Create a transformer with these processors
new logs.Transformer(this, 'Transformer', {
  transformerName: 'MyTransformer',
  logGroup: logGroup,
  transformerConfig: [jsonParser, addKeysProcessor]
});

Properties ​

csvOptionsoptionalCsvPropertycsv_optionsoptionalCsvPropertycsvOptionsoptionalCsvPropertyCsvOptionsoptionalCsvPropertyCsvOptionsoptionalCsvProperty#
Options for CSV parser.

Default: No CSV parser is created if props not set

Required when type is CSV.

grokOptionsoptionalGrokPropertygrok_optionsoptionalGrokPropertygrokOptionsoptionalGrokPropertyGrokOptionsoptionalGrokPropertyGrokOptionsoptionalGrokProperty#
Options for Grok parser.

Default: No Grok parser is created if props not set

Required when type is GROK.

jsonOptionsoptionalParseJSONPropertyjson_optionsoptionalParseJSONPropertyjsonOptionsoptionalParseJSONPropertyJsonOptionsoptionalParseJSONPropertyJsonOptionsoptionalParseJSONProperty#
Options for JSON parser.

Default: No JSON parser is created if props not set

Required when type is JSON.

keyValueOptionsoptionalParseKeyValuePropertykey_value_optionsoptionalParseKeyValuePropertykeyValueOptionsoptionalParseKeyValuePropertyKeyValueOptionsoptionalParseKeyValuePropertyKeyValueOptionsoptionalParseKeyValueProperty#
Options for key-value parser.

Default: No key-value parser is created if props not set

Required when type is KEY_VALUE.

parseToOCSFOptionsoptionalParseToOCSFPropertyparse_to_ocsf_optionsoptionalParseToOCSFPropertyparseToOCSFOptionsoptionalParseToOCSFPropertyParseToOCSFOptionsoptionalParseToOCSFPropertyParseToOCSFOptionsoptionalParseToOCSFProperty#
Options for ParseToOCSF parser.

Default: no OCSF parser is created.

Required when type is set to OCSF