Get original entry value in LogQL line_format

Question

In LogQL line_format template expression, is there a way to access the original log entry (assume the entry is not in JSON or any parseable format and all labels are log labels and not extracted labels).

example: ... | line_format "{{.log_label1}}, {{.log_label2}}: {{<some way to show the entire original log entry>}}"

score 7 · Accepted Answer · answered Mar 25 '21 at 16:57

7

One way it to prepend it with a regular expression capturing the entire message

... |regexp '(?P<message>.*)' |line_format "{{.some_other_var}} {{.message}}"

Note that the ' around the regex should really by ` otherwise it might not work

answered Mar 25 '21 at 16:57

mgoetzke

804
7
14

The regexp is a nice trick, thanks! I wonder if there is some "default" variable that would allow the same without involving another parser... – JNev Mar 26 '21 at 17:14
Yup, I was wondering that too and then found your question :) sadly the documentation is not really that good , though it is a great product – mgoetzke Mar 27 '21 at 18:22

score 3 · Answer 2 · edited Jul 27 '23 at 09:15

3

You can use the line template function:

... | line_format "{{.host}} {{ __line__ }}"

edited Jul 27 '23 at 09:15

Jan Garaj

25,598
3
38
59

answered May 31 '23 at 11:20

japi

31
1

score 0 · Answer 3 · answered Jul 12 '22 at 23:18

0

It looks like instead of regexp you can use json parser:

... | json | line_format "{{.stream}}: {{.log}}"

answered Jul 12 '22 at 23:18

mrk

284
3
5

Get original entry value in LogQL line_format

3 Answers3