Fix k8sattributes sources

Signed-off-by: Joao Henri <joao.rocha@suse.com>
rancher · Aug 30, 2023 · d606a5d · d606a5d
1 parent 4f586e0
commit d606a5d
Showing 1 changed file with 3 additions and 10 deletions.
diff --git a/pkg/resources/collector/templates.go b/pkg/resources/collector/templates.go
@@ -175,6 +175,9 @@ filelog/rke2:
         warn: W
         error: E
         fatal: F
+  - type: move
+    from: body
+    to: attributes.message
   - type: add
     field: attributes.log_type
     value: controlplane
@@ -211,16 +214,6 @@ processors:
         name: k8s.pod.name
       - from: resource_attribute
         name: k8s.namespace.name
-      - from: resource_attribute
-        name: k8s.auditlog.stage
-      - from: resource_attribute
-        name: k8s.auditlog.stage_timestamp
-      - from: resource_attribute
-        name: k8s.auditlog.level
-      - from: resource_attribute
-        name: k8s.auditlog.audit_id
-      - from: resource_attribute
-        name: k8s.auditlog.resource
     - sources:
       - from: connection
     extract: