vector-aggregator helm release

vector-aggregator helm

No introduction found. Create it?

More popular helm chart found

vector-aggregator from bjw-s is more popular with 22 repositories.

Install

Install with:

helm repo add vector-charts https://helm.vector.dev/
helm install vector-aggregator vector-charts/vector -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (3 out of 7)

Name	Repo	Stars	Version	Timestamp
vector-aggregator	vaskozl/home-infra	93	0.42.1	3 days ago
vector-aggregator	toboshii/home-ops	339	0.14.0	a year ago
vector-aggregator	jr0dd/home-ops	46	0.29.0	a year ago

Name

Repo

Stars

Version

Timestamp

vector-aggregator

vaskozl/home-infra

0.42.1

3 days ago

vector-aggregator

toboshii/home-ops

339

0.14.0

a year ago

vector-aggregator

jr0dd/home-ops

0.29.0

a year ago

Values

See the most popular values for this chart:

Key	Types
role (7) `Stateless-Aggregator`	string
customConfig.data_dir (6) `/vector-data-dir`	string
customConfig.api.enabled (4) `false`	boolean
customConfig.sinks.loki_journal.batch.max_bytes (4) `2049000`	number
customConfig.sinks.loki_journal.encoding.codec (4) `json`	string
customConfig.sinks.loki_journal.endpoint (4) `http://loki-gateway:80`	string
customConfig.sinks.loki_journal.inputs[] (4) `- journal_logs`	string
customConfig.sinks.loki_journal.labels.hostname (4) {{`{{ host }}`}}	string
customConfig.sinks.loki_journal.labels.job (1) `journal`	string
customConfig.sinks.loki_journal.out_of_order_action (4) `accept`	string
customConfig.sinks.loki_journal.remove_label_fields (4) `true`	boolean
customConfig.sinks.loki_journal.remove_timestamp (4) `true`	boolean
customConfig.sinks.loki_journal.type (4) `loki`	string
customConfig.sinks.loki_kubernetes.batch.max_bytes (4) `2049000`	number
customConfig.sinks.loki_kubernetes.encoding.codec (4) `json`	string
customConfig.sinks.loki_kubernetes.endpoint (4) `http://loki-gateway:80`	string
customConfig.sinks.loki_kubernetes.inputs[] (4) `- kubernetes_logs_remap`	string
customConfig.sinks.loki_kubernetes.out_of_order_action (4) `rewrite_timestamp`	string
customConfig.sinks.loki_kubernetes.remove_label_fields (4) `true`	boolean
customConfig.sinks.loki_kubernetes.remove_timestamp (4) `true`	boolean
customConfig.sinks.loki_kubernetes.type (4) `loki`	string
customConfig.sinks.loki_kubernetes.labels.app (3) {{`{{ custom_app_name }}`}}	string
customConfig.sinks.loki_kubernetes.labels.namespace (3) {{`{{ kubernetes.pod_namespace }}`}}	string
customConfig.sinks.loki_kubernetes.labels.node (3) {{`{{ kubernetes.pod_node_name }}`}}	string
customConfig.sinks.loki_kubernetes.labels.container_name (1) {{`{{ kubernetes.container_name }}`}}	string
customConfig.sinks.loki_kubernetes.labels.job (1) `kubernetes`	string
customConfig.sinks.loki_kubernetes.labels.k8s_app (1) {{`{{ "kubernetes.pod_labels.\"app.kubernetes.io/name\"" }}`}}	string
customConfig.sinks.loki_kubernetes.labels.k8s_container (1) {{`{{ "kubernetes.container_name" }}`}}	string
customConfig.sinks.loki_kubernetes.labels.k8s_filename (1) {{`{{ "kubernetes.file" }}`}}	string
customConfig.sinks.loki_kubernetes.labels.k8s_instance (1) {{`{{ "kubernetes.pod_labels.\"app.kubernetes.io/instance\"" }}`}}	string
customConfig.sinks.loki_kubernetes.labels.k8s_namespace (1) {{`{{ "kubernetes.pod_namespace" }}`}}	string
customConfig.sinks.loki_kubernetes.labels.k8s_node (1) {{`{{ "kubernetes.pod_node_name" }}`}}	string
customConfig.sinks.loki_kubernetes.labels.k8s_pod (1) {{`{{ "kubernetes.pod_name" }}`}}	string
customConfig.sinks.files.encoding.codec (2) `json`	string
customConfig.sinks.files.encoding.only_fields[] (1) `- timestamp - message - stream - pod - container`	string
customConfig.sinks.files.inputs[] (2) `- sort`	string
customConfig.sinks.files.path (2) `/var/log/k8s/{{ "{{" }} .folder {{ "}}" }}/{{ "{{" }} .filename {{ "}}" }}-%Y%m%d.log`	string
customConfig.sinks.files.type (2) `file`	string
customConfig.sinks.loki_opnsense_filterlog.batch.max_bytes (1) `2049000`	number
customConfig.sinks.loki_opnsense_filterlog.encoding.codec (1) `json`	string
customConfig.sinks.loki_opnsense_filterlog.endpoint (1) `http://loki-stack.monitoring:3100`	string
customConfig.sinks.loki_opnsense_filterlog.inputs[] (1) `- opnsense_filterlog_route._unmatched`	string
customConfig.sinks.loki_opnsense_filterlog.labels.hostname (1) `opnsense`	string
customConfig.sinks.loki_opnsense_filterlog.labels.job (1) `opnsense`	string
customConfig.sinks.loki_opnsense_filterlog.out_of_order_action (1) `accept`	string
customConfig.sinks.loki_opnsense_filterlog.type (1) `loki`	string
customConfig.sinks.prom_exporter.address (1) `0.0.0.0:9090`	string
customConfig.sinks.prom_exporter.inputs[] (1) `- vector_metrics`	string
customConfig.sinks.prom_exporter.type (1) `prometheus_exporter`	string
customConfig.sinks.prometheus_sink.address (1) `0.0.0.0:9090`	string
customConfig.sinks.prometheus_sink.inputs[] (1) `- vector_metrics`	string
customConfig.sinks.prometheus_sink.type (1) `prometheus_exporter`	string
customConfig.sinks.talos_kernel.batch.max_bytes (1) `1048576`	number
customConfig.sinks.talos_kernel.encoding.codec (1) `json`	string
customConfig.sinks.talos_kernel.encoding.except_fields[] (1) `- __host`	string
customConfig.sinks.talos_kernel.endpoint (1) `http://loki-stack.monitoring:3100`	string
customConfig.sinks.talos_kernel.inputs[] (1) `- talos_kernel_logs_xform`	string
customConfig.sinks.talos_kernel.labels.hostname (1) {{`{{ __host }}`}}	string
customConfig.sinks.talos_kernel.labels.job (1) `talos_kernel`	string
customConfig.sinks.talos_kernel.labels.service (1) {{`{{ facility }}`}}	string
customConfig.sinks.talos_kernel.out_of_order_action (1) `rewrite_timestamp`	string
customConfig.sinks.talos_kernel.type (1) `loki`	string
customConfig.sinks.talos_service.batch.max_bytes (1) `400000`	number
customConfig.sinks.talos_service.encoding.codec (1) `json`	string
customConfig.sinks.talos_service.encoding.except_fields[] (1) `- __host`	string
customConfig.sinks.talos_service.endpoint (1) `http://loki-stack.monitoring:3100`	string
customConfig.sinks.talos_service.inputs[] (1) `- talos_service_logs_xform`	string
customConfig.sinks.talos_service.labels.hostname (1) {{`{{ __host }}`}}	string
customConfig.sinks.talos_service.labels.job (1) `talos_service`	string
customConfig.sinks.talos_service.labels.service (1) {{`{{ "talos-service" }}`}}	string
customConfig.sinks.talos_service.out_of_order_action (1) `rewrite_timestamp`	string
customConfig.sinks.talos_service.type (1) `loki`	string
customConfig.sources.journal_logs.address (4) `0.0.0.0:6000`	string
customConfig.sources.journal_logs.type (4) `vector`	string
customConfig.sources.journal_logs.version (4) `2`	string
customConfig.sources.kubernetes_logs.address (4) `0.0.0.0:6010`	string
customConfig.sources.kubernetes_logs.type (4) `vector`	string
customConfig.sources.kubernetes_logs.version (4) `2`	string
customConfig.sources.vector_metrics.type (4) `internal_metrics`	string
customConfig.sources.vector.address (2) `0.0.0.0:6000`	string
customConfig.sources.vector.type (2) `vector`	string
customConfig.sources.vector.version (2) `2`	string
customConfig.sources.opnsense_filterlog_logs.address (1) `0.0.0.0:5140`	string
customConfig.sources.opnsense_filterlog_logs.mode (1) `udp`	string
customConfig.sources.opnsense_filterlog_logs.type (1) `syslog`	string
customConfig.sources.talos_kernel_logs.address (1) `0.0.0.0:6050`	string
customConfig.sources.talos_kernel_logs.decoding.codec (1) `json`	string
customConfig.sources.talos_kernel_logs.host_key (1) `__host`	string
customConfig.sources.talos_kernel_logs.max_length (1) `102400`	number
customConfig.sources.talos_kernel_logs.mode (1) `udp`	string
customConfig.sources.talos_kernel_logs.type (1) `socket`	string
customConfig.sources.talos_service_logs.address (1) `0.0.0.0:6051`	string
customConfig.sources.talos_service_logs.decoding.codec (1) `json`	string
customConfig.sources.talos_service_logs.host_key (1) `__host`	string
customConfig.sources.talos_service_logs.max_length (1) `102400`	number
customConfig.sources.talos_service_logs.mode (1) `udp`	string
customConfig.sources.talos_service_logs.type (1) `socket`	string
customConfig.sources.vector_logs.type (1) `internal_logs`	string
customConfig.transforms.kubernetes_logs_remap.inputs[] (3) `- kubernetes_logs`	string
customConfig.transforms.kubernetes_logs_remap.source (3) `# Standardize 'app' index .custom_app_name = .pod_labels."app.kubernetes.io/name" \|\| .pod_labels.app \|\| .pod_labels."k8s-app" \|\| "unknown"`	string
customConfig.transforms.kubernetes_logs_remap.type (3) `remap`	string
customConfig.transforms.sort.inputs[] (2) `- vector`	string
customConfig.transforms.sort.source (2) if exists(.kubernetes.pod_labels."app.kubernetes.io/instance") { .filename = .kubernetes.pod_labels."app.kubernetes.io/instance" } else if exists(.kubernetes.pod_labels.app) { .filename = .kubernetes.pod_labels.app } else if exists(.kubernetes.container_name) { .filename = .kubernetes.container_name } else { .filename = "unlabeled" } if exists(.kubernetes.pod_namespace) { .folder = .kubernetes.pod_namespace } else { .folder = "unlabeled" } .pod = .kubernetes.pod_name .container = .kubernetes.container_name	string
customConfig.transforms.sort.type (2) `remap`	string
customConfig.transforms.opnsense_filterlog_remap.inputs[] (1) `- opnsense_filterlog_logs`	string
customConfig.transforms.opnsense_filterlog_remap.source (1) msg = parse_csv!(string!(.message)) # Only parse IPv4 / IPv6 if msg[8] == "4" \|\| msg[8] == "6" { .filter_interface = msg[4] .filter_direction = msg[7] .filter_action = msg[6] .filter_ip_version = msg[8] .filter_protocol = msg[16] .filter_source_ip = msg[18] .filter_destination_ip = msg[19] if (msg[16] == "icmp" \|\| msg[16] == "igmp" \|\| msg[16] == "gre") { .filter_data = msg[20] } else { .filter_source_port = msg[20] .filter_destination_port = msg[21] .filter_data_length = msg[22] if msg[8] == "4" && msg[16] == "tcp" { .filter_tcp_flags = msg[23] } } }	string
customConfig.transforms.opnsense_filterlog_remap.type (1) `remap`	string
customConfig.transforms.opnsense_filterlog_route.inputs[] (1) `- opnsense_filterlog_remap`	string
customConfig.transforms.opnsense_filterlog_route.route.pass_action (1) `.filter_action == "pass"`	string
customConfig.transforms.opnsense_filterlog_route.type (1) `route`	string
customConfig.transforms.talos_kernel_logs_xform.inputs[] (1) `- talos_kernel_logs`	string
customConfig.transforms.talos_kernel_logs_xform.source (1) `.__host = replace!(.__host, r'10\.244\.0\..+', "control-01") .__host = replace(.__host, r'10\.244\.1\..+', "control-02") .__host = replace(.__host, r'10\.244\.2\..+', "control-03") .__host = replace(.__host, r'10\.244\.3\..+', "worker-01")`	string
customConfig.transforms.talos_kernel_logs_xform.type (1) `remap`	string
customConfig.transforms.talos_service_logs_xform.inputs[] (1) `- talos_service_logs`	string
customConfig.transforms.talos_service_logs_xform.source (1) `.__host = replace!(.__host, r'10\.244\.0\..+', "control-01") .__host = replace(.__host, r'10\.244\.1\..+', "control-02") .__host = replace(.__host, r'10\.244\.2\..+', "control-03") .__host = replace(.__host, r'10\.244\.3\..+', "worker-01")`	string
customConfig.transforms.talos_service_logs_xform.type (1) `remap`	string
customConfig.expire_metrics_secs (1) `60`	number
podMonitor.enabled (5) `true`	boolean
podMonitor.jobLabel (3) `vector-aggregator`	string
podMonitor.port (3) `prometheus-sink`	string
image.repository (4) `timberio/vector`	string
image.tag (4) `0.34.1-debian`	string
replicas (3) `1`	number
resources.limits.memory (3) `512Mi`	string
resources.limits.cpu (1) `4000m`	string
resources.requests.cpu (3) `3m`	string
resources.requests.memory (2) `64Mi`	string
service.enabled (3) `true`	boolean
service.type (3) `LoadBalancer`	string
service.annotations."metallb.universe.tf/loadBalancerIPs" (1) `${LB_VECTOR}`	string
service.ports[].name (1) `vector prom-exporter`	string
service.ports[].port (1) `6000 9090`	number
extraVolumeMounts[].mountPath (2) `/var/log/k8s`	string
extraVolumeMounts[].name (2) `pvc-vector`	string
extraVolumes[].name (2) `pvc-vector`	string
extraVolumes[].persistentVolumeClaim.claimName (2) `pvc-vector`	string
affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchExpressions[].key (1) `app.kubernetes.io/component`	string
affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchExpressions[].operator (1) `In`	string
affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchExpressions[].values[] (1) `- Stateless-Aggregator`	string
affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1) `kubernetes.io/hostname`	string
affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1) `100`	number
containerPorts[].containerPort (1) `6000 9090`	number
containerPorts[].name (1) `vector prom-exporter`	string
dataDir (1) `/vector-data-dir`	string
existingConfigMaps[] (1) `- vector-aggregator-configmap`	string
podAnnotations."configmap.reloader.stakater.com/reload" (1) `vector-aggregator`	string
workloadResourceAnnotations."reloader.stakater.com/auto" (1) `true`	string

Key

Types

role (7)

Stateless-Aggregator

string

customConfig.data_dir (6)

/vector-data-dir

string

customConfig.api.enabled (4)

false

boolean

customConfig.sinks.loki_journal.batch.max_bytes (4)

number

customConfig.sinks.loki_journal.encoding.codec (4)

json

string

customConfig.sinks.loki_journal.endpoint (4)

http://loki-gateway:80

string

customConfig.sinks.loki_journal.inputs[] (4)

- journal_logs

string

customConfig.sinks.loki_journal.labels.hostname (4)

{{`{{ host }}`}}

string

customConfig.sinks.loki_journal.labels.job (1)

journal

string

customConfig.sinks.loki_journal.out_of_order_action (4)

accept

string

customConfig.sinks.loki_journal.remove_label_fields (4)

true

boolean

customConfig.sinks.loki_journal.remove_timestamp (4)

true

boolean

customConfig.sinks.loki_journal.type (4)

loki

string

customConfig.sinks.loki_kubernetes.batch.max_bytes (4)

number

customConfig.sinks.loki_kubernetes.encoding.codec (4)

json

string

customConfig.sinks.loki_kubernetes.endpoint (4)

http://loki-gateway:80

string

customConfig.sinks.loki_kubernetes.inputs[] (4)

- kubernetes_logs_remap

string

customConfig.sinks.loki_kubernetes.out_of_order_action (4)

rewrite_timestamp

string

customConfig.sinks.loki_kubernetes.remove_label_fields (4)

true

boolean

customConfig.sinks.loki_kubernetes.remove_timestamp (4)

true

boolean

customConfig.sinks.loki_kubernetes.type (4)

loki

string

customConfig.sinks.loki_kubernetes.labels.app (3)

{{`{{ custom_app_name }}`}}

string

customConfig.sinks.loki_kubernetes.labels.namespace (3)

{{`{{ kubernetes.pod_namespace }}`}}

string

customConfig.sinks.loki_kubernetes.labels.node (3)

{{`{{ kubernetes.pod_node_name }}`}}

string

customConfig.sinks.loki_kubernetes.labels.container_name (1)

{{`{{ kubernetes.container_name }}`}}

string

customConfig.sinks.loki_kubernetes.labels.job (1)

kubernetes

string

customConfig.sinks.loki_kubernetes.labels.k8s_app (1)

{{`{{ "kubernetes.pod_labels.\"app.kubernetes.io/name\"" }}`}}

string

customConfig.sinks.loki_kubernetes.labels.k8s_container (1)

{{`{{ "kubernetes.container_name" }}`}}

string

customConfig.sinks.loki_kubernetes.labels.k8s_filename (1)

{{`{{ "kubernetes.file" }}`}}

string

customConfig.sinks.loki_kubernetes.labels.k8s_instance (1)

{{`{{ "kubernetes.pod_labels.\"app.kubernetes.io/instance\"" }}`}}

string

customConfig.sinks.loki_kubernetes.labels.k8s_namespace (1)

{{`{{ "kubernetes.pod_namespace" }}`}}

string

customConfig.sinks.loki_kubernetes.labels.k8s_node (1)

{{`{{ "kubernetes.pod_node_name" }}`}}

string

customConfig.sinks.loki_kubernetes.labels.k8s_pod (1)

{{`{{ "kubernetes.pod_name" }}`}}

string

customConfig.sinks.files.encoding.codec (2)

json

string

customConfig.sinks.files.encoding.only_fields[] (1)

- timestamp
- message
- stream
- pod
- container

string

customConfig.sinks.files.inputs[] (2)

- sort

string

customConfig.sinks.files.path (2)

/var/log/k8s/{{ "{{" }} .folder {{ "}}" }}/{{ "{{" }} .filename {{ "}}" }}-%Y%m%d.log

string

customConfig.sinks.files.type (2)

file

string

customConfig.sinks.loki_opnsense_filterlog.batch.max_bytes (1)

number

customConfig.sinks.loki_opnsense_filterlog.encoding.codec (1)

json

string

customConfig.sinks.loki_opnsense_filterlog.endpoint (1)

http://loki-stack.monitoring:3100

string

customConfig.sinks.loki_opnsense_filterlog.inputs[] (1)

- opnsense_filterlog_route._unmatched

string

customConfig.sinks.loki_opnsense_filterlog.labels.hostname (1)

opnsense

string

customConfig.sinks.loki_opnsense_filterlog.labels.job (1)

opnsense

string

customConfig.sinks.loki_opnsense_filterlog.out_of_order_action (1)

accept

string

customConfig.sinks.loki_opnsense_filterlog.type (1)

loki

string

customConfig.sinks.prom_exporter.address (1)

0.0.0.0:9090

string

customConfig.sinks.prom_exporter.inputs[] (1)

- vector_metrics

string

customConfig.sinks.prom_exporter.type (1)

prometheus_exporter

string

customConfig.sinks.prometheus_sink.address (1)

0.0.0.0:9090

string

customConfig.sinks.prometheus_sink.inputs[] (1)

- vector_metrics

string

customConfig.sinks.prometheus_sink.type (1)

prometheus_exporter

string

customConfig.sinks.talos_kernel.batch.max_bytes (1)

number

customConfig.sinks.talos_kernel.encoding.codec (1)

json

string

customConfig.sinks.talos_kernel.encoding.except_fields[] (1)

- __host

string

customConfig.sinks.talos_kernel.endpoint (1)

http://loki-stack.monitoring:3100

string

customConfig.sinks.talos_kernel.inputs[] (1)

- talos_kernel_logs_xform

string

customConfig.sinks.talos_kernel.labels.hostname (1)

{{`{{ __host }}`}}

string

customConfig.sinks.talos_kernel.labels.job (1)

talos_kernel

string

customConfig.sinks.talos_kernel.labels.service (1)

{{`{{ facility }}`}}

string

customConfig.sinks.talos_kernel.out_of_order_action (1)

rewrite_timestamp

string

customConfig.sinks.talos_kernel.type (1)

loki

string

customConfig.sinks.talos_service.batch.max_bytes (1)

number

customConfig.sinks.talos_service.encoding.codec (1)

json

string

customConfig.sinks.talos_service.encoding.except_fields[] (1)

- __host

string

customConfig.sinks.talos_service.endpoint (1)

http://loki-stack.monitoring:3100

string

customConfig.sinks.talos_service.inputs[] (1)

- talos_service_logs_xform

string

customConfig.sinks.talos_service.labels.hostname (1)

{{`{{ __host }}`}}

string

customConfig.sinks.talos_service.labels.job (1)

talos_service

string

customConfig.sinks.talos_service.labels.service (1)

{{`{{ "talos-service" }}`}}

string

customConfig.sinks.talos_service.out_of_order_action (1)

rewrite_timestamp

string

customConfig.sinks.talos_service.type (1)

loki

string

customConfig.sources.journal_logs.address (4)

0.0.0.0:6000

string

customConfig.sources.journal_logs.type (4)

vector

string

customConfig.sources.journal_logs.version (4)

string

customConfig.sources.kubernetes_logs.address (4)

0.0.0.0:6010

string

customConfig.sources.kubernetes_logs.type (4)

vector

string

customConfig.sources.kubernetes_logs.version (4)

string

customConfig.sources.vector_metrics.type (4)

internal_metrics

string

customConfig.sources.vector.address (2)

0.0.0.0:6000

string

customConfig.sources.vector.type (2)

vector

string

customConfig.sources.vector.version (2)

string

customConfig.sources.opnsense_filterlog_logs.address (1)

0.0.0.0:5140

string

customConfig.sources.opnsense_filterlog_logs.mode (1)

udp

string

customConfig.sources.opnsense_filterlog_logs.type (1)

syslog

string

customConfig.sources.talos_kernel_logs.address (1)

0.0.0.0:6050

string

customConfig.sources.talos_kernel_logs.decoding.codec (1)

json

string

customConfig.sources.talos_kernel_logs.host_key (1)

__host

string

customConfig.sources.talos_kernel_logs.max_length (1)

number

customConfig.sources.talos_kernel_logs.mode (1)

udp

string

customConfig.sources.talos_kernel_logs.type (1)

socket

string

customConfig.sources.talos_service_logs.address (1)

0.0.0.0:6051

string

customConfig.sources.talos_service_logs.decoding.codec (1)

json

string

customConfig.sources.talos_service_logs.host_key (1)

__host

string

customConfig.sources.talos_service_logs.max_length (1)

number

customConfig.sources.talos_service_logs.mode (1)

udp

string

customConfig.sources.talos_service_logs.type (1)

socket

string

customConfig.sources.vector_logs.type (1)

internal_logs

string

customConfig.transforms.kubernetes_logs_remap.inputs[] (3)

- kubernetes_logs

string

customConfig.transforms.kubernetes_logs_remap.source (3)

# Standardize 'app' index
.custom_app_name = .pod_labels."app.kubernetes.io/name" || .pod_labels.app || .pod_labels."k8s-app" || "unknown"

string

customConfig.transforms.kubernetes_logs_remap.type (3)

remap

string

customConfig.transforms.sort.inputs[] (2)

- vector

string

customConfig.transforms.sort.source (2)

if exists(.kubernetes.pod_labels."app.kubernetes.io/instance") {
  .filename = .kubernetes.pod_labels."app.kubernetes.io/instance"
} else if exists(.kubernetes.pod_labels.app) {
  .filename = .kubernetes.pod_labels.app
} else if exists(.kubernetes.container_name) {
  .filename = .kubernetes.container_name
} else {
  .filename = "unlabeled"
}

if exists(.kubernetes.pod_namespace) {
  .folder = .kubernetes.pod_namespace
} else {
  .folder = "unlabeled"
}

.pod = .kubernetes.pod_name
.container = .kubernetes.container_name

string

customConfig.transforms.sort.type (2)

remap

string

customConfig.transforms.opnsense_filterlog_remap.inputs[] (1)

- opnsense_filterlog_logs

string

customConfig.transforms.opnsense_filterlog_remap.source (1)

msg = parse_csv!(string!(.message))
# Only parse IPv4 / IPv6
if msg[8] == "4" || msg[8] == "6" {
  .filter_interface = msg[4]
  .filter_direction = msg[7]
  .filter_action = msg[6]
  .filter_ip_version = msg[8]
  .filter_protocol = msg[16]
  .filter_source_ip = msg[18]
  .filter_destination_ip = msg[19]
  if (msg[16] == "icmp" || msg[16] == "igmp" || msg[16] == "gre") {
    .filter_data = msg[20]
  } else {
    .filter_source_port = msg[20]
    .filter_destination_port = msg[21]
    .filter_data_length = msg[22]
    if msg[8] == "4" && msg[16] == "tcp" {
      .filter_tcp_flags = msg[23]
    }
  }
}

string

customConfig.transforms.opnsense_filterlog_remap.type (1)

remap

string

customConfig.transforms.opnsense_filterlog_route.inputs[] (1)

- opnsense_filterlog_remap

string

customConfig.transforms.opnsense_filterlog_route.route.pass_action (1)

.filter_action == "pass"

string

customConfig.transforms.opnsense_filterlog_route.type (1)

route

string

customConfig.transforms.talos_kernel_logs_xform.inputs[] (1)

- talos_kernel_logs

string

customConfig.transforms.talos_kernel_logs_xform.source (1)

.__host = replace!(.__host, r'10\.244\.0\..+', "control-01")
.__host = replace(.__host, r'10\.244\.1\..+', "control-02")
.__host = replace(.__host, r'10\.244\.2\..+', "control-03")
.__host = replace(.__host, r'10\.244\.3\..+', "worker-01")

string

customConfig.transforms.talos_kernel_logs_xform.type (1)

remap

string

customConfig.transforms.talos_service_logs_xform.inputs[] (1)

- talos_service_logs

string

customConfig.transforms.talos_service_logs_xform.source (1)

.__host = replace!(.__host, r'10\.244\.0\..+', "control-01")
.__host = replace(.__host, r'10\.244\.1\..+', "control-02")
.__host = replace(.__host, r'10\.244\.2\..+', "control-03")
.__host = replace(.__host, r'10\.244\.3\..+', "worker-01")

string

customConfig.transforms.talos_service_logs_xform.type (1)