More Condition Predicates

More options when filtering and routing events

by

Vector has a concept “conditions” that are used to qualify events. For example, this is used in Vector’s unit testing feature , swimlanes transform , and filter transform . This change adds new predicates that enable powerful matching and condition expression. Specifically, the following predicates were added:

  • begins_with
  • contains
  • ends_with
  • is_log
  • is_metric
  • regex

Example

For example, you can filter all messages that contain the error term with the new contains predicate:

[transforms.errors]
  type = "filter"
  condition."message.contain" = "error"

The world is your oyster.