-
Notifications
You must be signed in to change notification settings - Fork 508
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add deriving metrics from logs use case to Data Prepper #6248
Conversation
Signed-off-by: Melissa Vagi <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>
@dlvenable This use case PR is ready for your review at availability. Thank you, Melissa |
Signed-off-by: Melissa Vagi <[email protected]> Signed-off-by: Melissa Vagi <[email protected]>
@dlvenable At your availability, will you review this use case? It's one of the two last use cases we're transferring from OpenSearch Ingestion. Thank you, Melissa |
Hi @dlvenable, Is it possible to review this PR by end of week? We need to get this done to address feedback in the benchmark study. Thank you. |
@dlvenable Following up to get your tech review on this use case carryover from OpenSearch Service Ingestion to Data Prepper. Once we have your approval, I can move this forward to editorial and get it published. |
Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Melissa Vagi <[email protected]>
@dlvenable Thanks for your review. I've accepted your changes. Do we have any other outstanding items to address before merging? |
|
||
# Deriving metrics from logs | ||
|
||
You can use Data Prepper to derive metrics from logs. The following example pipeline receives incoming logs using the [`http` source plugin]({{site.url}}{{site.baseurl}}/data-prepper/pipelines/configuration/sources/http-source) and the [`grok` processor]({{site.url}}{{site.baseurl}}/data-prepper/pipelines/configuration/processors/grok/). It then uses the [`aggregate` processor]({{site.url}}{{site.baseurl}}/data-prepper/pipelines/configuration/processors/aggregate/) to extract the metric bytes aggregated during a 30-second window and derives histograms from the results. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This writes data to two indexes - one with un-aggregated events and the other derived metrics.
Can we clarify somewhere? You mention below how we use two pipelines. But, maybe we can make this end result more explicit.
Signed-off-by: Melissa Vagi <[email protected]> Signed-off-by: Melissa Vagi <[email protected]>
|
||
The following example pipeline receives incoming logs using the [`http` source plugin]({{site.url}}{{site.baseurl}}/data-prepper/pipelines/configuration/sources/http-source) and the [`grok` processor]({{site.url}}{{site.baseurl}}/data-prepper/pipelines/configuration/processors/grok/). It then uses the [`aggregate` processor]({{site.url}}{{site.baseurl}}/data-prepper/pipelines/configuration/processors/aggregate/) to extract the metric bytes aggregated during a 30-second window and derives histograms from the results. | ||
|
||
This pipeline writes data to two different OpenSearch indexes: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@dlvenable Please review the text added at lines 14--27 and let me know if these additions address your feedback and are accurate. Thank you.
Signed-off-by: Melissa Vagi <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>
* Add use case to Data Prepper Signed-off-by: Melissa Vagi <[email protected]> * Add content Signed-off-by: Melissa Vagi <[email protected]> * Copy edits Signed-off-by: Melissa Vagi <[email protected]> * Update metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: David Venable <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: David Venable <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> * Update metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> --------- Signed-off-by: Melissa Vagi <[email protected]> Co-authored-by: David Venable <[email protected]> Co-authored-by: Nathan Bower <[email protected]> (cherry picked from commit a838228) Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
…roject#6248) * Add use case to Data Prepper Signed-off-by: Melissa Vagi <[email protected]> * Add content Signed-off-by: Melissa Vagi <[email protected]> * Copy edits Signed-off-by: Melissa Vagi <[email protected]> * Update metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: David Venable <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: David Venable <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> * Update metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> --------- Signed-off-by: Melissa Vagi <[email protected]> Co-authored-by: David Venable <[email protected]> Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: [email protected] <[email protected]>
…roject#6248) * Add use case to Data Prepper Signed-off-by: Melissa Vagi <[email protected]> * Add content Signed-off-by: Melissa Vagi <[email protected]> * Copy edits Signed-off-by: Melissa Vagi <[email protected]> * Update metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: David Venable <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: David Venable <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> * Update metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> Signed-off-by: Melissa Vagi <[email protected]> * Update metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> * Update _data-prepper/common-use-cases/metrics-logs.md Signed-off-by: Melissa Vagi <[email protected]> --------- Signed-off-by: Melissa Vagi <[email protected]> Co-authored-by: David Venable <[email protected]> Co-authored-by: Nathan Bower <[email protected]> Signed-off-by: Sander van de Geijn <[email protected]>
Description
Add deriving metrics from logs use case to Data Prepper
Issues Resolved
Closes #6429
Checklist
For more information on following Developer Certificate of Origin and signing off your commits, please check here.