检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Before a source writes received events to channels, the interceptor can convert or delete the events. Each interceptor processes only the events received by a given source. Timestamp interceptor This interceptor inserts a timestamp into Flume event headers.
Function example If the value of the content field is 123, delete the age and name fields, and then set the value of the content field to ctx.
Deleting a tag: Click Delete in the Operation column of the tag. WARNING: Deleted tags cannot be recovered. If a tag is used by a transfer task, you need to modify the task configuration after deleting the tag. For details about transfer, see Transferring Logs to OBS.
Solution: If the value of the program field is access, use the e_psv function to parse the content field and delete the original field content. e_if(e_search("program==access"), e_compose(e_psv("content", "remote_addr, time_local,host,request,status,request_time,body_bytes_sent,upstream_addr
case when post_pv = 'null' then 0 else (case when post_pv > 0 then post_pv else 0 end) end AS VARCHAR ), '/', cast( case when delete_pv = 'null' then 0 else (case when delete_pv > 0 then delete_pv else 0 end) end AS VARCHAR ), '/', ')' ) AS "PV(Head, Get, Put, Post, Delete
