From 7a9d7e8f5ef565d66579b5006e8735b718db3ece Mon Sep 17 00:00:00 2001 From: Cristhian Garcia Date: Mon, 18 Mar 2024 14:51:10 -0500 Subject: [PATCH] fix: send event as str from vector to the 'event' field --- .../templates/aspects/apps/vector/partials/common-post.toml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tutoraspects/templates/aspects/apps/vector/partials/common-post.toml b/tutoraspects/templates/aspects/apps/vector/partials/common-post.toml index 127090293..c07692d70 100644 --- a/tutoraspects/templates/aspects/apps/vector/partials/common-post.toml +++ b/tutoraspects/templates/aspects/apps/vector/partials/common-post.toml @@ -67,7 +67,7 @@ if err_timestamp != null { } } event_id = parsed_json.id -. = {"event_id": event_id, "emission_time": format_timestamp!(time, format: "%+"), "event_str": encode_json(parsed_json)} +. = {"event_id": event_id, "emission_time": format_timestamp!(time, format: "%+"), "event": encode_json(parsed_json)} ''' drop_on_error = true drop_on_abort = true @@ -77,7 +77,7 @@ type = "remap" inputs = ["xapi"] # Time formats: https://docs.rs/chrono/0.4.19/chrono/format/strftime/index.html#specifiers source = ''' -.message = parse_json!(.event_str) +.message = parse_json!(.event) ''' ### Sinks @@ -93,7 +93,7 @@ encoding.only_fields = ["time", "message.context.course_id", "message.context.us type = "console" inputs = ["xapi_debug"] encoding.codec = "json" -encoding.only_fields = ["event_id", "emission_time", "message.verb.id"] +encoding.only_fields = ["event_id", "emission_time", "event"] # # Send logs to clickhouse [sinks.clickhouse]