tencent cloud

PrevNext

피드백

키워드를 검색하세요

Recent Pages

문서
Cloud Log Service
    문서
    Download PDF

    Enrichment Functions

    마지막 업데이트 시간:2024-01-20 17:44:35
    PDF 다운로드

      Function enrich_table

      Function definition

      This function uses CSV structure data to match fields in logs and, when matched fields are found, the function adds other fields and values in the CSV data to the source logs.

      Syntax description

      enrich_table(CSV data string, CSV column name string, output=Target field name or list, mode="overwrite")

      Parameter description

      Parameter
      Description
      Parameter Type
      Required
      Default Value
      Value Range
      data
      Input CSV data, where the first row is column names and the rest rows are corresponding values. Example: region,count\\nbj, 200\\ngz, 300
      string
      Yes
      -
      -
      fields
      Column name to match. If the field name in the CSV data is the same as the field with the same name in the log, the matching is successful. The value can be a single field name or multiple new field names concatenated with commas.
      string
      Yes
      -
      -
      output
      Output field list. The value can be a single field name or multiple new field names concatenated with commas.
      string
      Yes
      -
      -
      mode
      Write mode of the new field. Default value: overwrite
      string
      No
      overwrite
      -

      Example

      Raw log:
      {"region": "gz"}
      Processing rule:
      enrich_table("region,count\\nbj,200\\ngz,300", "region", output="count")
      Processing result:
      {"count":"300","region":"gz"}

      Function enrich_dict

      Function definition

      This function uses dict structure data to match a field value in a log. If the specified field and value match a key in the dict structure data, the function assigns the value of the key to another field in the log.

      Syntax description

      enrich_dict(Dict data string, Source field name, output=Target field, mode="overwrite")

      Parameter description

      Parameter
      Description
      Parameter Type
      Required
      Default Value
      Value Range
      data
      Input dict data, which must be the escaped string of a JSON object. Example: enrich_dict("{"200":"SUCCESS","500":"FAILED"}", "status", output="message")
      string
      Yes
      -
      -
      fields
      Field name to match. If the value of the key in the dict data is the same as the value of the specified field, the matching is successful. The value can be a single field name or multiple new field names concatenated with commas.
      string
      Yes
      -
      -
      output
      Target field list. After successful matching, the function writes the corresponding values in the dict data to the target field list. The value can be a single field name or multiple new field names concatenated with commas.
      string
      Yes
      -
      -
      mode
      Write mode of the new field.
      string
      No
      overwrite
      -

      Example

      Raw log:
      {"status": "500"}
      Processing rule:
      enrich_dict("{\\"200\\":\\"SUCCESS\\",\\"500\\":\\"FAILED\\"}", "status", output="message")
      Processing result:
      {"message":"FAILED","status":"500"}
      
      문의하기

      고객의 업무에 전용 서비스를 제공해드립니다.

      문의하기
      기술 지원

      더 많은 도움이 필요하시면, 티켓을 통해 연락 바랍니다. 티켓 서비스는 연중무휴 24시간 제공됩니다.

      티켓 제출
      연중무휴 24시간 전화 지원
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      개인정보 처리방침서비스 약관쿠키 정책