Processor
¶
Source code in docs_src/capo_cloudwatch_logs/types/processor.py
add_keys
instance-attribute
¶
add_keys: NotRequired[AddKeys]
Use this parameter to include the addKeys processor in your transformer.
copy_value
instance-attribute
¶
copy_value: NotRequired[CopyValue]
Use this parameter to include the copyValue processor in your transformer.
csv
instance-attribute
¶
csv: NotRequired[CSV]
Use this parameter to include the CSV processor in your transformer.
date_time_converter
instance-attribute
¶
date_time_converter: NotRequired[DateTimeConverter]
Use this parameter to include the datetimeConverter processor in your transformer.
delete_keys
instance-attribute
¶
delete_keys: NotRequired[DeleteKeys]
Use this parameter to include the deleteKeys processor in your transformer.
grok
instance-attribute
¶
grok: NotRequired[Grok]
Use this parameter to include the grok processor in your transformer.
list_to_map
instance-attribute
¶
list_to_map: NotRequired[ListToMap]
Use this parameter to include the listToMap processor in your transformer.
lower_case_string
instance-attribute
¶
lower_case_string: NotRequired[LowerCaseString]
Use this parameter to include the lowerCaseString processor in your transformer.
move_keys
instance-attribute
¶
move_keys: NotRequired[MoveKeys]
Use this parameter to include the moveKeys processor in your transformer.
parse_cloudfront
instance-attribute
¶
parse_cloudfront: NotRequired[ParseCloudfront]
Use this parameter to include the parseCloudfront processor in your transformer.
If you use this processor, it must be the first processor in your transformer.
parse_json
instance-attribute
¶
parse_json: NotRequired[ParseJSON]
Use this parameter to include the parseJSON processor in your transformer.
parse_key_value
instance-attribute
¶
parse_key_value: NotRequired[ParseKeyValue]
Use this parameter to include the parseKeyValue processor in your transformer.
parse_postgres
instance-attribute
¶
parse_postgres: NotRequired[ParsePostgres]
Use this parameter to include the parsePostGres processor in your transformer.
If you use this processor, it must be the first processor in your transformer.
parse_route53
instance-attribute
¶
parse_route53: NotRequired[ParseRoute53]
Use this parameter to include the parseRoute53 processor in your transformer.
If you use this processor, it must be the first processor in your transformer.
parse_to_ocsf
instance-attribute
¶
parse_to_ocsf: NotRequired[ParseToOCSF]
Use this parameter to convert logs into Open Cybersecurity Schema (OCSF) format.
parse_vpc
instance-attribute
¶
parse_vpc: NotRequired[ParseVPC]
Use this parameter to include the parseVPC processor in your transformer.
If you use this processor, it must be the first processor in your transformer.
parse_waf
instance-attribute
¶
parse_waf: NotRequired[ParseWAF]
Use this parameter to include the parseWAF processor in your transformer.
If you use this processor, it must be the first processor in your transformer.
rename_keys
instance-attribute
¶
rename_keys: NotRequired[RenameKeys]
Use this parameter to include the renameKeys processor in your transformer.
split_string
instance-attribute
¶
split_string: NotRequired[SplitString]
Use this parameter to include the splitString processor in your transformer.
substitute_string
instance-attribute
¶
substitute_string: NotRequired[SubstituteString]
Use this parameter to include the substituteString processor in your transformer.
trim_string
instance-attribute
¶
trim_string: NotRequired[TrimString]
Use this parameter to include the trimString processor in your transformer.
type_converter
instance-attribute
¶
type_converter: NotRequired[TypeConverter]
Use this parameter to include the typeConverter processor in your transformer.
upper_case_string
instance-attribute
¶
upper_case_string: NotRequired[UpperCaseString]
Use this parameter to include the upperCaseString processor in your transformer.