# Processors

Processors can be inserted into your telemetry pipeline to transform your data before it arrives at your destination. Adding attributes, filtering, and converting logs to metrics are all the types of transformations we can do using processors in Bindplane.

Unless otherwise stated, any input values in our processors are case sensitive.

## Processor Categories

### Data Transformation

* Add, modify, or remove fields and attributes
* Parse structured data from various formats
* Convert between data types and formats

### Filtering & Sampling

* Filter telemetry based on conditions, fields, or patterns
* Sample data to reduce volume
* Remove duplicate or unwanted data

### Data Enrichment

* Add contextual information and metadata
* Lookup additional data from external sources
* Detect and add resource information

### Aggregation & Statistics

* Compute metrics from logs and traces
* Group and aggregate data
* Generate statistical summaries

## Available Processors

### Data Transformation Processors

| Processor                                                                                     | Metrics | Logs | Traces | Description                                         |
| --------------------------------------------------------------------------------------------- | :-----: | :--: | :----: | --------------------------------------------------- |
| [Add Fields](https://docs.bindplane.com/integrations/processors/add-fields)                   |    ✓    |   ✓  |    ✓   | Add attributes, resources, and log record body keys |
| [Copy Field](https://docs.bindplane.com/integrations/processors/copy-field)                   |    ✓    |   ✓  |    ✓   | Copy values from one field to another               |
| [Delete Empty Values](https://docs.bindplane.com/integrations/processors/delete-empty-values) |    ✓    |   ✓  |    ✓   | Remove fields with empty or null values             |
| [Delete Fields](https://docs.bindplane.com/integrations/processors/delete-fields)             |    ✓    |   ✓  |    ✓   | Remove specific fields from telemetry               |
| [Move Field](https://docs.bindplane.com/integrations/processors/move-field)                   |    ✓    |   ✓  |    ✓   | Move values between different field types           |
| [Rename Fields](https://docs.bindplane.com/integrations/processors/rename-fields)             |    ✓    |   ✓  |    ✓   | Rename fields and attributes                        |
| [Rename Metric](https://docs.bindplane.com/integrations/processors/rename-metric)             |    ✓    |      |        | Rename metric names                                 |
| [Split](https://docs.bindplane.com/integrations/processors/split)                             |    ✓    |   ✓  |        | Split telemetry records into multiple records       |
| [Transform](https://docs.bindplane.com/integrations/processors/transform)                     |    ✓    |   ✓  |    ✓   | Transform telemetry using custom OTTL statements    |
| [Unroll](https://docs.bindplane.com/integrations/processors/unroll)                           |         |   ✓  |        | Expand arrays into separate log records             |

### Parsing Processors

| Processor                                                                               | Metrics | Logs | Traces | Description                                      |
| --------------------------------------------------------------------------------------- | :-----: | :--: | :----: | ------------------------------------------------ |
| [Parse CSV](https://docs.bindplane.com/integrations/processors/parse-csv)               |    ✓    |   ✓  |    ✓   | Parse CSV-formatted strings into structured data |
| [Parse JSON](https://docs.bindplane.com/integrations/processors/parse-json)             |    ✓    |   ✓  |    ✓   | Parse JSON strings into structured data          |
| [Parse Key Value](https://docs.bindplane.com/integrations/processors/parse-key-value)   |    ✓    |   ✓  |    ✓   | Parse key-value pairs from strings               |
| [Parse Severity](https://docs.bindplane.com/integrations/processors/parse-severity)     |         |   ✓  |        | Extract and standardize log severity levels      |
| [Parse Timestamp](https://docs.bindplane.com/integrations/processors/parse-timestamp)   |    ✓    |   ✓  |    ✓   | Parse timestamps from various formats            |
| [Parse with Regex](https://docs.bindplane.com/integrations/processors/parse-with-regex) |    ✓    |   ✓  |    ✓   | Extract data using regular expressions           |
| [Parse XML](https://docs.bindplane.com/integrations/processors/parse-xml)               |    ✓    |   ✓  |    ✓   | Parse XML strings into structured data           |

### Filtering & Sampling Processors

| Processor                                                                                     | Metrics | Logs | Traces | Description                            |
| --------------------------------------------------------------------------------------------- | :-----: | :--: | :----: | -------------------------------------- |
| [Filter by Condition](https://docs.bindplane.com/integrations/processors/filter-by-condition) |    ✓    |   ✓  |    ✓   | Filter based on OTTL conditions        |
| [Filter by Field](https://docs.bindplane.com/integrations/processors/filter-by-field)         |    ✓    |   ✓  |    ✓   | Filter based on field values           |
| [Filter by Regex](https://docs.bindplane.com/integrations/processors/filter-by-regex)         |         |   ✓  |        | Filter using regular expressions       |
| [Filter HTTP Status](https://docs.bindplane.com/integrations/processors/filter-http-status)   |         |   ✓  |        | Filter logs based on HTTP status codes |
| [Filter Metric Name](https://docs.bindplane.com/integrations/processors/filter-metric-name)   |    ✓    |      |        | Filter metrics by name patterns        |
| [Filter Severity](https://docs.bindplane.com/integrations/processors/filter-severity)         |         |   ✓  |        | Filter logs by severity level          |
| [Log Sampling](https://docs.bindplane.com/integrations/processors/log-sampling)               |         |   ✓  |        | Sample logs to reduce volume           |
| [Deduplicate Logs](https://docs.bindplane.com/integrations/processors/deduplicate-logs)       |         |   ✓  |        | Remove duplicate log entries           |

### Data Enrichment Processors

| Processor                                                                                         | Metrics | Logs | Traces | Description                                       |
| ------------------------------------------------------------------------------------------------- | :-----: | :--: | :----: | ------------------------------------------------- |
| [Coalesce](https://docs.bindplane.com/integrations/processors/coalesce)                           |    ✓    |   ✓  |    ✓   | Combine multiple fields into a single field       |
| [Group by Attributes](https://docs.bindplane.com/integrations/processors/group-by-attributes)     |    ✓    |   ✓  |    ✓   | Group telemetry by attribute values               |
| [Lookup Fields](https://docs.bindplane.com/integrations/processors/lookup-fields)                 |    ✓    |   ✓  |    ✓   | Enrich data using lookup tables                   |
| [Resource Detection](https://docs.bindplane.com/integrations/processors/resource-detection)       |    ✓    |   ✓  |    ✓   | Automatically detect and add resource information |
| [Redact Sensitive Data](https://docs.bindplane.com/integrations/processors/redact-sensitive-data) |    ✓    |   ✓  |    ✓   | Redact sensitive data in telemetry                |
| [Rewrite Timestamp](https://docs.bindplane.com/integrations/processors/rewrite-timestamp)         |    ✓    |   ✓  |    ✓   | Modify timestamp values                           |

### Aggregation & Statistics Processors

| Processor                                                                                                 | Metrics | Logs | Traces | Description                                  |
| --------------------------------------------------------------------------------------------------------- | :-----: | :--: | :----: | -------------------------------------------- |
| [Batch](https://docs.bindplane.com/integrations/processors/batch)                                         |    ✓    |   ✓  |    ✓   | Batch telemetry for efficient processing     |
| [Compute Metric Statistics](https://docs.bindplane.com/integrations/processors/compute-metric-statistics) |    ✓    |      |        | Calculate statistics from metric data        |
| [Count Telemetry](https://docs.bindplane.com/integrations/processors/count-telemetry)                     |    ✓    |   ✓  |    ✓   | Count telemetry records and generate metrics |
| [Extract Metric](https://docs.bindplane.com/integrations/processors/extract-metric)                       |         |   ✓  |        | Extract metrics from log data                |

### Specialized Processors

| Processor                                                                                                         | Metrics | Logs | Traces | Description                                     |
| ----------------------------------------------------------------------------------------------------------------- | :-----: | :--: | :----: | ----------------------------------------------- |
| [Concat](https://docs.bindplane.com/integrations/processors/concat)                                               |    ✓    |   ✓  |    ✓   | Concatenate multiple fields into a single field |
| [Custom](https://docs.bindplane.com/integrations/processors/custom)                                               |    ✓    |   ✓  |    ✓   | Custom OpenTelemetry processor configuration    |
| [Google SecOps Standardization](https://docs.bindplane.com/integrations/processors/google-secops-standardization) |         |   ✓  |        | Standardize logs for Google Security Operations |
| [Marshal](https://docs.bindplane.com/integrations/processors/marshal)                                             |         |   ✓  |        | Marshal data into specific formats              |
| [OCSF Standardization](https://docs.bindplane.com/integrations/processors/ocsf-standardization)                   |         |   ✓  |        | Standardize logs to OCSF                        |

## Available Processors by Bindplane Plan/License

<table><thead><tr><th>Processor</th><th align="center">Bindplane (Google Edition)</th><th align="center" valign="middle">Growth / Enterprise / Bindplane Enterprise (Google Edition)</th></tr></thead><tbody><tr><td><a href="processors/compute-metric-statistics">Compute metric statistics</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/copy-field">Copy field</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/count-telemetry">Count telemetry</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/custom">Custom</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/delete-empty-values">Delete empty values</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/delete-fields">Delete fields</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/deduplicate-logs">Deduplicate logs</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/extract-metric">Extract metric</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/filter-by-condition">Filter by condition</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/filter-by-field">Filter by field</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/filter-http-status">Filter HTTP status</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/filter-metric-name">Filter metric name</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/filter-severity">Filter severity</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/log-sampling">Log sampling</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/redact-sensitive-data">Redact sensitive data</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="https://docs.bindplane.com/integrations/processors/transform">Transform</a></td><td align="center"></td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/add-fields">Add fields</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/batch">Batch</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/coalesce">Coalesce</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="https://docs.bindplane.com/integrations/processors/concat">Concat</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/filter-by-regex">Filter by regex</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/group-by-attributes">Group by attributes</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/google-secops-standardization">Google SecOps standardization</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/lookup-fields">Lookup fields</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/marshal">Marshal</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/move-field">Move field</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/ocsf-standardization">OCSF Standardization</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/parse-csv">Parse CSV</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/parse-json">Parse JSON</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/parse-key-value">Parse key value</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/parse-severity">Parse severity</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/parse-timestamp">Parse timestamp</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/parse-with-regex">Parse with regex</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/parse-xml">Parse XML</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/rename-fields">Rename fields</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/rename-metric">Rename metric</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/resource-detection">Resource detection</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="https://docs.bindplane.com/integrations/processors/rewrite-timestamp">Rewrite timestamp</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/split">Split</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr><tr><td><a href="processors/unroll">Unroll</a></td><td align="center">✓</td><td align="center" valign="middle">✓</td></tr></tbody></table>

{% hint style="info" %}
For more information about our plans, see our Plans & Pricing page [here](https://docs.bindplane.com/plans-and-pricing).
{% endhint %}

## Getting Started

To add a processor to your configuration:

1. Navigate to the **Configs** tab in Bindplane
2. Select or create a configuration
3. Add a source to collect data
4. Click **Add Processor**
5. Choose the appropriate processor type from the list above
6. Configure the required parameters
7. Add destinations to route the processed data
8. Apply the configuration to your collectors

## Processor Bundles

Processor bundles are a convenient way to group multiple processors into a single unit. Each bundle can encapsulate a list of processors designed to perform complex transformations. Bundles enable the user to streamline common tasks that require multiple processors.

Click [here](https://docs.bindplane.com/integrations/broken-reference) for an in-depth view on how to use processor bundles.

## Telemetry Type Support

Processors can operate on different types of telemetry data:

* **Metrics**: Numerical measurements and statistics
* **Logs**: Text-based event records
* **Traces**: Distributed tracing data for request flows

Some processors support multiple telemetry types, allowing you to apply consistent transformations across your entire observability pipeline.

## Enterprise Features

Certain processors are available only in [Bindplane Enterprise Edition](https://bindplane.com/solutions). Please contact `sales@bindplane.com` for more information about enterprise features.

## Common Use Cases

* **Log Enrichment**: Add environment tags, service names, and other contextual information
* **Data Normalization**: Standardize log formats and field names across different sources
* **Security**: Redact sensitive data like passwords, API keys, and PII
* **Performance Optimization**: Filter out noise and sample high-volume logs
* **Compliance**: Ensure data meets regulatory requirements through transformation and filtering


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.bindplane.com/integrations/processors.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
