Class ObservabilityPipelineEnrichmentTableProcessor

The enrichment_table processor enriches logs using a static CSV file, GeoIP database, or reference table. Exactly one of file, geoip, or reference_table must be configured.

Supported pipeline types: logs

Hierarchy

  • ObservabilityPipelineEnrichmentTableProcessor

Constructors

constructor

Properties

additionalProperties? displayName? enabled file? geoip? id include referenceTable? target type

Constructors

constructor

Properties

Optional additionalProperties

additionalProperties?: {
    [key: string]: any;
}

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

Type declaration

  • [key: string]: any

Optional displayName

displayName?: string

The display name for a component.

enabled

enabled: boolean

Indicates whether the processor is enabled.

Optional file

file?: ObservabilityPipelineEnrichmentTableFile

Defines a static enrichment table loaded from a CSV file.

Optional geoip

geoip?: ObservabilityPipelineEnrichmentTableGeoIp

Uses a GeoIP database to enrich logs based on an IP field.

id

id: string

The unique identifier for this processor.

include

include: string

A Datadog search query used to determine which logs this processor targets.

Optional referenceTable

referenceTable?: ObservabilityPipelineEnrichmentTableReferenceTable

Uses a Datadog reference table to enrich logs.

target

target: string

Path where enrichment results should be stored in the log.

type

type: ObservabilityPipelineEnrichmentTableProcessorType

The processor type. The value should always be enrichment_table.

Settings

Member Visibility

Theme

Generated using TypeDoc