Hello,
I am unable to view the statedump of my parser code.
Raw log is as follows:
"resource": {
"type": "k8s_container",
"labels": {
"container_name": "abc",
"namespace_name": "default",
"location": "us-central",
"project_id": "xyz",
"cluster_name": "test-cluster",
}
}
The following is my parser code with the statedump:
filter {
json {
source => "message"
array_function => "split_columns"
}
for key, value in resource.labels map {
mutate {
replace => {
"test.key" => "%{key}"
"test.value" => "%{value}"
}
}
statedump {}
}
}
Where am i going wrong?