Datadog: Remap a field from an array inside an attribute

Question

The log has come into datadog as a JSON object and attributes have been parsed automatically.

Next I want to extract the owner field from an array nested in the JSON:

This syntax doesn't work does in datadog: @detail.resources[0].tags.owner

{
  name: "example_name"
  detail: { 
    resources: [
     /*0*/ { tags: {owner: "[email protected]"}}, 
     /*1*/ { tags: {owner: "[email protected]"}}
    ]
}

This syntax doesn't work does in datadog: @detail.resources[0].tags.owner

each value in the array should have the same owner. How can I use datadog processors to remap the first found email from this array to another attribute called @application.owner? Do I have to unparse the JSON somehow and use a Grok Processor?

Vladimir · Accepted Answer · 2025-02-07 23:05:22Z

1

I had the same issue. What has worked for me at the end is using a Remapper, for example:

Set attribute(s) or tag key to remap: detail.resources.0.tags.owner

Set target attribute or tag key: application.owner

answered Feb 7 at 23:05

Vladimir

5443 silver badges6 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

david.barkhuizen Jun 27 at 4:07

...at the end - thank you @Vladimir - I struggled with this for a long time

Collectives™ on Stack Overflow

Datadog: Remap a field from an array inside an attribute

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related