Post

Vector

Posted
By Xiong Ding 1 min read

vector is a combination of filebeat and logstash.

VRL syntax

See blog https://vector.dev/guides/level-up/transformation/

The . acts as a sort of “container” for the event data. . by itself refers to the root event, while you can use paths like .foo, .foo[0], .foo.bar, .foo.bar[0], and so on to reference subfields, array indices, and more.

Also I found the log() function is every useful for debugging.

elk
elk vector
This post is licensed under CC BY 4.0 by the author.