Module Values.ParseKeyValueSource

This processor parses a specified field in the original log event into key-value pairs. For more information about this processor including examples, see parseKeyValue in the CloudWatch Logs User Guide.

Sourcetype nonrec t = {
  1. source : Source.t option;
    (*

    Path to the field in the log event that will be parsed. Use dot notation to access child fields. For example, store.book

    *)
  2. destination : DestinationField.t option;
    (*

    The destination field to put the extracted key-value pairs into

    *)
  3. fieldDelimiter : ParserFieldDelimiter.t option;
    (*

    The field delimiter string that is used between key-value pairs in the original log events. If you omit this, the ampersand & character is used.

    *)
  4. keyValueDelimiter : KeyValueDelimiter.t option;
    (*

    The delimiter string to use between the key and value in each pair in the transformed log event. If you omit this, the equal = character is used.

    *)
  5. keyPrefix : KeyPrefix.t option;
    (*

    If you want to add a prefix to all transformed keys, specify it here.

    *)
  6. nonMatchValue : NonMatchValue.t option;
    (*

    A value to insert into the value field in the result, when a key-value pair is not successfully split.

    *)
  7. overwriteIfExists : OverwriteIfExists.t option;
    (*

    Specifies whether to overwrite the value if the destination key already exists. If you omit this, the default is false.

    *)
}
Sourceval make : ?source:??? -> ?destination:??? -> ?fieldDelimiter:??? -> ?keyValueDelimiter:??? -> ?keyPrefix:??? -> ?nonMatchValue:??? -> ?overwriteIfExists:??? -> unit -> t
Sourceval to_value : t -> [> `Structure of (string * [> `Boolean of OverwriteIfExists.t | `String of Source.t ]) list ]
Sourceval to_query : t -> Awso.Client.Query.t
Sourceval of_xml : Awso.Xml.t -> t
Sourceval of_string : string -> t
Sourceval of_json : Yojson.Safe.t -> t
Sourceval to_json : t -> Yojson.Safe.t