ParserProcessorProps Struct
Properties for creating configurable parser processors.
Example
ts
// Create a log group
const logGroup = new logs.LogGroup(this, 'MyLogGroup');
// Create a JSON parser processor
const jsonParser = new logs.ParserProcessor({
type: logs.ParserProcessorType.JSON
});
// Create a processor to add keys
const addKeysProcessor = new logs.JsonMutatorProcessor({
type: logs.JsonMutatorType.ADD_KEYS,
addKeysOptions: {
entries: [{
key: 'metadata.transformed_in',
value: 'CloudWatchLogs'
}]
}
});
// Create a transformer with these processors
new logs.Transformer(this, 'Transformer', {
transformerName: 'MyTransformer',
logGroup: logGroup,
transformerConfig: [jsonParser, addKeysProcessor]
});
Properties
csvOptionsoptionalCsvPropertycsv_optionsoptionalCsvPropertycsvOptionsoptionalCsvPropertyCsvOptionsoptionalCsvPropertyCsvOptionsoptionalCsvProperty#Options for CSV parser.
Default: No CSV parser is created if props not set
Required when type is CSV.
grokOptionsoptionalGrokPropertygrok_optionsoptionalGrokPropertygrokOptionsoptionalGrokPropertyGrokOptionsoptionalGrokPropertyGrokOptionsoptionalGrokProperty#Options for Grok parser.
Default: No Grok parser is created if props not set
Required when type is GROK.
jsonOptionsoptionalParseJSONPropertyjson_optionsoptionalParseJSONPropertyjsonOptionsoptionalParseJSONPropertyJsonOptionsoptionalParseJSONPropertyJsonOptionsoptionalParseJSONProperty#Options for JSON parser.
Default: No JSON parser is created if props not set
Required when type is JSON.
keyValueOptionsoptionalParseKeyValuePropertykey_value_optionsoptionalParseKeyValuePropertykeyValueOptionsoptionalParseKeyValuePropertyKeyValueOptionsoptionalParseKeyValuePropertyKeyValueOptionsoptionalParseKeyValueProperty#Options for key-value parser.
Default: No key-value parser is created if props not set
Required when type is KEY_VALUE.
parseToOCSFOptionsoptionalParseToOCSFPropertyparse_to_ocsf_optionsoptionalParseToOCSFPropertyparseToOCSFOptionsoptionalParseToOCSFPropertyParseToOCSFOptionsoptionalParseToOCSFPropertyParseToOCSFOptionsoptionalParseToOCSFProperty#Options for ParseToOCSF parser.
Default: no OCSF parser is created.
Required when type is set to OCSF
typeParserProcessorTypetypeParserProcessorTypetypeParserProcessorTypeTypeParserProcessorTypeTypeParserProcessorTyperequired#The type of parser processor.