Transforms reference

Shape your data as it moves through your Vector topology

Available transforms

Remap with VRL transform

Modify your observability data as it passes through your topology using Vector Remap Language (VRL)

Aggregate transform

AWS Cloudwatch Logs Subscription Parser transform

aws_cloudwatch_logs_subscription_parser

Parse logs from AWS Cloudwatch Logs

AWS EC2 metadata transform

aws_ec2_metadata

Parse metadata emitted by AWS EC2 instances

Dedupe transform

Deduplicate events passing through a topology, i.e. eliminate any events with duplicated content within a specified time window

Filter transform

Filter events based on a set of conditions

GeoIP transform

Enrich events with GeoIP metadata

Log to metric transform

Convert log events to metric events

Modify event data using the Lua programming language

Metric to log transform

Convert metric events to log events

Reduce transform

Collapse multiple log events into a single event based on a set of conditions and merge strategies

Route transform

Split a stream of events into multiple sub-streams based on user-supplied conditions

Sample transform

Sample events from an event stream based on supplied criteria and at a configurable rate

Tag cardinality limit transform

tag_cardinality_limit

Limit the cardinality of tags on metrics events as a safeguard against cardinality explosion

Modify events using an embedded WebAssembly (Wasm) virtual machine