vectordotdev / vrl

Vector Remap Language
Mozilla Public License 2.0
133 stars 62 forks source link

New Remap function for parse_syslog_facility #848

Open timansky opened 5 months ago

timansky commented 5 months ago

A note for the community

Similar to request to map syslog severity levels to integer from https://github.com/vectordotdev/vector/issues/5501 it would be helpful to have a means to remap syslog facility keywords to their integer values as well.

Use Cases

When parsing events message, the raw facility values could be enriched with a simple remap transform to down stream processing

Attempted Solutions

No response

Proposal

create a remap-function to_syslog_facility which could produce the facility name:

parse_syslog_facility("authpriv") => 10

References

No response

Version

No response

jszwedko commented 5 months ago

Makes sense to me, thanks for the request @timansky . We'd be happy to see a PR for this if you or someone else feels motivated.

timansky commented 5 months ago

I'll try, looks simple

jszwedko commented 5 months ago

I'll try, looks simple

🥳 You can see the PR you linked to, https://github.com/vectordotdev/vector/issues/5501, as an example.