Comments (4)
Hi - which terraform example are you using? Looks like cloudwatch-logs-json.tf
?
This error is normal if a time field name has been specified but cannot be found in the event being processed. We use the time field name to assign the right timestamp to the event, otherwise the current time (time.Now()
) is set.
The time field name is defined in the terraform config like this:
TIME_FIELD_FORMAT = "%s(%L)?"
TIME_FIELD_NAME = "start_time"
If your event has a timestamp field, you could use this to set that field name (and time format). Alternatively, setting ""
for both values will use the current time when sending the event.
I should update the docs/comments to make this more clear. I'll leave this open and have a look at it during the week. Also happy to help if you have other questions.
from agentless-integrations-for-aws.
Hi, yeah this is from vpc-flow-logs.tf. It seems that some VPC flow logs come with start timestamp while others don't.
from agentless-integrations-for-aws.
I think the issue is TIME_FIELD_FORMAT. In your example it's set to "%s(%L)?" while VPC flow logs only include unix seconds.
from agentless-integrations-for-aws.
We’re going to close this for now. Feel free to re-open, if it’s still relevant.
from agentless-integrations-for-aws.
Related Issues (20)
- patch openSSL CVE
- Add support for configuring integrations using environment variables HOT 1
- Add support for mysql audit logs HOT 2
- Build ARM binary as part of publish workflow HOT 2
- Document the regexps now that they're embedded in Go code HOT 1
- Allow masking values based on regex
- Support provided.al2 runtime in place of deprecated Go1.x
- s3-handler: Add NLB logs support
- s3-handler: support SNS as an alternative to SQS
- Deploy lambdas to us-gov-west-1 and us-gov-east-1 HOT 2
- Add DEBUG mode
- Add support for CloudTrail logs HOT 1
- Add CloudFront Access Logs Support HOT 1
- De-dupe docs HOT 1
- Allow adding fields in cloudwatch-handler HOT 2
- Allow API token to be pulled from SSM Secure String HOT 4
- cloudwatch-handler currently errors on START/END/REPORT lines; issue seems to be fixed in publisher. Is this intentional? HOT 3
- s3-handler doesn't provide enough configuration for ALB logs to be correctly imported HOT 4
- "Event dropped due to sampling and response body" HOT 6
- Verify gzip handling HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from agentless-integrations-for-aws.