Concat
Description
The Concat processor can be used to concatenate fields together into a single string.
Supported Types
✓
✓
✓
Configuration
Condition
A condition that determines when this processor is applied.
Source Field Type
The type of telemetry that contains the fields to be concatenated.
Source Fields
The telemetry fields to concatenate together.
Target Field Type
The telemetry field type where the concatenation result will be placed.
Target Field
The target field to place the concatenation result into. May only be blank if Body is selected for the Target Field Type.
Delimiter
The delimiter to place between the source fields when concatenating. Defaults to a space, but may also be empty.
Example Configuration(s)
Concatenating a syslog message back together after it has been parsed into multiple pieces, and the timestamp changed using the Rewrite Timestamp processor.
The original log body

The attributes created by parsing, and then rewriting the timestamp

The concat processor settings
The delimiter here is set to nothing (the default space deleted) since the fields maintained their spacing from the parsing.

The final result concatenated and placed back into the log body

Last updated
Was this helpful?