Skip to content

Conversation

@conner
Copy link

@conner conner commented May 7, 2017

This introduces a simple modifier to field references specified in the format string:

Adding a suffix of the form [<integer>] will force the field value to be a string
of that length. The field value, whether it's blank, shorter, or longer than the
specified length will be of length <integer>. The consequence is a columnar output.

See commit message for a slightly longer explanation with a simple example.

I'm not entirely sure this fits a general desire and should be merged upstream,
but it fits a need that my organization has, and we'll be using it : )

conner added 2 commits May 6, 2017 17:44
- Very helpful if you're watching multiple fields that have a dynamic
  length and/or if you're interested in being able to view your logs in
  a truncated-columnar layout

- Specifying a length after a field name reference is optional

- It will truncate or pad to fit the string into the specified length

e.g.

$ elktail -f "%@timestamp[16] %msg[25] <- always the same length!"

might print something like:

2017-05-06T17:47  ###.##.###.##:##### [06/May/2017:1 <- always the same length!
2017-05-06T17:47  ##.###.##.###:##### [06/May/2017:1 <- always the same length!
2017-05-06T17:47  ###.##.###.###:##### [06/May/2017: <- always the same length!
2017-05-06T17:47  ##.###.##.###:##### [06/May/2017:1 <- always the same length!
2017-05-06T17:47  ##.###.##.###:##### [06/May/2017:1 <- always the same length!
2017-05-06T17:47  ##.###.##.##:##### [06/May/2017:13 <- always the same length!
2017-05-06T17:47  ##.###.###.###:##### [06/May/2017: <- always the same length!
2017-05-06T17:47  ##.###.###.##:##### [06/May/2017:1 <- always the same length!
2017-05-06T17:47  ##.###.###.##:##### [06/May/2017:1 <- always the same length!
2017-05-06T17:47  ##.###.###.###:##### [06/May/2017: <- always the same length!
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant