Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow source field to be deleted if dissect processor was successful #5345

Open
alamzeeshan opened this issue Jan 21, 2025 · 2 comments
Open
Assignees
Labels
enhancement New feature or request

Comments

@alamzeeshan
Copy link

Is your feature request related to a problem? Please describe.
Allow source field to be deleted if dissect processor was successful

Describe the solution you'd like
Modify dissect processor to support this new configuration that allows the source to be deleted when dissect processor was successful. Something in lines of delete_source option of parse_json processor.

Example:

  processor:
    - dissect:
        map:
          message: "%{Date} %{Time} %{Log_Type}: %{Message}"
        delete_source: true

Describe alternatives you've considered (Optional)
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

@alamzeeshan
Copy link
Author

If possible, I would like to work on this feature request.

@dlvenable dlvenable added enhancement New feature or request and removed untriaged labels Jan 21, 2025
@dlvenable
Copy link
Member

@alamzeeshan , This request sounds great. Yes, please create a PR and we'd be happy to merge. Please see the Developer Guide and let us know if you have any questions about getting started with development.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Development

No branches or pull requests

2 participants