Skip to content

Commit

Permalink
clarify condition behavior in readme
Browse files Browse the repository at this point in the history
  • Loading branch information
colelaven committed Oct 4, 2024
1 parent d94ef31 commit a2135f1
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion processor/logdedupprocessor/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ This processor is used to deduplicate logs by detecting identical logs over a ra

## How It Works
1. The user configures the log deduplication processor in the desired logs pipeline.
2. Each log entry for which any of the `conditions` evaluates `true` is aggregated over the configured `interval`. Logs that do not match any condition in `conditions` are passed onward in the pipeline without aggregating. Logs are considered identical if they have the same body, resource attributes, severity, and log attributes.
2. If the processor does not provide `conditions`, all logs are considered eligible for aggregation. If the processor does have configured `conditions`, all log entries where at least one of the `conditions` evaluates `true` are considered eligible for aggregation. Eligible identical logs are aggregated over the configured `interval`. Logs are considered identical if they have the same body, resource attributes, severity, and log attributes. Logs that do not match any condition in `conditions` are passed onward in the pipeline without aggregating.
3. After the interval, the processor emits a single log with the count of logs that were deduplicated. The emitted log will have the same body, resource attributes, severity, and log attributes as the original log. The emitted log will also have the following new attributes:

- `log_count`: The count of logs that were deduplicated over the interval. The name of the attribute is configurable via the `log_count_attribute` parameter.
Expand Down

0 comments on commit a2135f1

Please sign in to comment.