Graylog2 / Graylog2/graylog2-server
Add field content mapping as extractor/converter
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 217
Description
Sometimes it is useful to map field values to other representations while extracting data.
For example [the redis severity](http://graylog2.org/extractors/53d164f5e4b08b6a5f9f7b57) is a single character, but it would be nice if it was represented just like the syslog severity.
Add a converter type that supports a hash lookup table. That table could be static, or periodically refreshed from some external source.
Be careful to make the converter code path very fast and if the converter is updatable, that should happen on a different thread, replacing the entire table without taking locks.
via [a mailing list post](https://groups.google.com/forum/#!topic/graylog2/-yKoajPP9v4)
Contributor guide
Assessment
This issue has not been assessed yet.