diff --git a/resources/otel/processors/transform_application.yaml b/resources/otel/processors/transform_application.yaml index 90f79e7ff..ef29f44bd 100644 --- a/resources/otel/processors/transform_application.yaml +++ b/resources/otel/processors/transform_application.yaml @@ -5,4 +5,4 @@ transform/application: statements: - flatten(body["event_data"], depth=1) - flatten(body["event_data"], depth=2) - - replace_all_patterns(body["event_data"], "key", "data.([0-9]).", "data_$$1") \ No newline at end of file + - replace_all_patterns(body["event_data"], "key", "^data.([0-9A-Za-z]+).", "data_$${1}_") # Transforms 'data..' keys. If is not empty, it formats as 'data_0_TargetUserName:"Administrator"'. Otherwise, it appears as 'data_0_:"Administrator"'. diff --git a/resources/otel/receivers/windowseventlog_application.yaml b/resources/otel/receivers/windowseventlog_application.yaml index b2d0c1e85..f53960d71 100644 --- a/resources/otel/receivers/windowseventlog_application.yaml +++ b/resources/otel/receivers/windowseventlog_application.yaml @@ -36,5 +36,5 @@ receiver: windowseventlog/application/NAME: channel: Application exclude_providers: [] - attributes: + resource: type: \ No newline at end of file