Add json parser to kube audit logs colelctor pipeline

Signed-off-by: Joao Henri <joao.rocha@suse.com>
rancher · Aug 28, 2023 · 99ef907 · 99ef907
1 parent 391bd7a
commit 99ef907
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/pkg/resources/collector/templates.go b/pkg/resources/collector/templates.go
@@ -145,9 +145,8 @@ filelog/rke2:
         warn: W
         error: E
         fatal: F
-  - type: move
-    from: body
-    to: attributes.message
+  - type: json_parser
+    if: '$matches "^{.*}$"' 
   - type: add
     field: attributes.log_type
     value: controlplane