search

observIQ / stanza

Fast and lightweight log transport and processing.
Apache License 2.0
182 stars 23 forks source link

Supporting ECS in Stanza (and Otel) #692

Closed jkowall closed 2 years ago

jkowall commented 2 years ago

Is your feature request related to a problem? Please describe. When Stanza or Otel ingest logs which are unrelated to other signals there doesn't seem to be standard parsers for this data in Stanza (or otel). For example supporting a schema like ECS would allow better correlation. I have been working with the community (Logz, Sumo, AWS, Elastic) on adding the ECS spec to otel (https://github.com/open-telemetry/oteps/pull/199) but the issue remains that the parsin is not there.

Describe the solution you'd like Parsing for ECS in Stanza (and otel)

Describe alternatives you've considered None

Additional context Nothing beyond what is explained here.

Discuss :)

djaglowski commented 2 years ago

I think this suggestion is better discussed with the OTel project, specifically opentelemetry-collector-contrib where the active version of this codebase is maintained. Do you mind reopening this issue over there?

jkowall commented 2 years ago

No probs