[Feature Request] Adding a custom string instead of ellipsis on vector truncate

[Nirzak]

A note for the community

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Use Cases

We want to make alerting for the events that have been truncated but an ellipsis is usually a more generic string to identify and any messages can have ellipsis on a log ingestion program if it's out of the viewing area of events. So if vector provides a feature so that we can add a custom string at the end of the truncated message. then we can set alerting based on that string. Making it through the truncate function would make it easier for us.

Attempted Solutions

No

Proposal

We can implement a function to add that custom string via vector truncate vrl function. just like the following

truncate("A long sentence.", limit: 11, custom_message: [event_truncated])

References

No response

Version

vector 0.30.0

[StephenWakely]

It should be straightforward to make the ellipsis parameter of truncate take a boolean or a string representing the string to use.

[Nirzak]

It should be straightforward to make the ellipsis parameter of truncate take a boolean or a string representing the string to use.

Yea that’s what I was trying to mean. Thanks a lot!

[pront]

Hi @Nirzak, this feature sounds reasonable. (deleted my previous suggestion since it would not work generally as Stephen pointed out to me)

[Nirzak]

Hi @Nirzak, this feature sounds reasonable. (deleted my previous suggestion since it would not work generally as Stephen pointed out to me)

Thanks a lot for creating a PR on this issue.