Important: This documentation is about an older version. It's relevant only to the release noted, many of the features and functions have been updated or replaced. Please view the current version.
cri
stage
The cri
stage is a parsing stage that reads the log line using the standard CRI logging format.
Schema
cri: {}
Unlike most stages, the cri
stage provides no configuration options and only
supports the specific CRI log format. CRI specifies log lines log lines as
space-delimited values with the following components:
time
: The timestamp string of the logstream
: Either stdout or stderrlog
: The contents of the log line
No whitespace is permitted between the components. In the following example,
only the first log line can be properly formatted using the cri
stage:
"2019-01-01T01:00:00.000000001Z stderr P test\ngood"
"2019-01-01 T01:00:00.000000001Z stderr testgood"
"2019-01-01T01:00:00.000000001Z testgood"
Examples
For the given pipeline:
- cri: {}
Given the following log line:
"2019-04-30T02:12:41.8443515Z stdout xx message"
The following key-value pairs would be created in the set of extracted data:
content
:message
stream
:stdout
timestamp
:2019-04-30T02:12:41.8443515