transform processor
14 complete collector configs on this site use the transform processor. Each is a whole file, validated with otelcol-contrib v0.161.0.
- Mask PII in logs (e-mail, card numbers, IBAN, tokens, IPs)Rewrite e-mail addresses, card numbers, IBANs, bearer tokens and IPs to placeholders on the collector, before the data leaves your network.Logs
- Pseudonymise user IDs with a salted hashReplace user.id with a salted SHA-256 on logs and spans - same user, same value, so per-user queries still join.Logs · Traces
- Drop sensitive attributes before exportDelete named attributes, and every captured HTTP request header, from logs, spans and metrics before they are exported.Logs · Metrics · Traces
- Reduce metric cardinality (aggregate away per-request attributes)Strip user and request IDs from metric attributes and sum the points that collapse together, so one series per route remains.Metrics
- Parse nginx access logs into semantic conventionsTurn nginx combined-format access log lines into OpenTelemetry semantic-convention attributes, with typed status codes.Logs
- Parse Apache access logs into semantic conventionsTurn Apache combined-format access log lines into semantic-convention attributes, with typed status codes and sizes.Logs
- Set resource attributes the sender left outStamp environment and namespace onto telemetry at the collector, without overwriting what an SDK already set.Logs · Metrics · Traces
- Rename old HTTP attributes to current semantic conventionsMove http.method, http.status_code and http.target to the current names, so old and new services land in the same dashboards.Logs · Traces
- Collect Windows Event Log (Application, System, Security)Application, System and Security events as structured logs - provider, event id, level, event data - without the rendered text twice over.Logs
- Parse IIS W3C access logs into semantic conventionsEvery IIS request as a structured log: method, path, query, status, sizes, time taken and user agent, with the request's own UTC timestamp.Logs
- nginx access logs to Elasticsearch, parsed into semantic conventionsTail nginx, parse every request into semantic-convention fields with typed status codes, and index it in Elasticsearch.Logs
- Kubernetes pod logs to Loki, enriched with deployment and clusterEvery pod's logs into Loki over OTLP, labelled with namespace, pod, container, deployment, node and cluster.Logs
- Firewall syslog to a SIEM, with PII maskedFirewall and VPN syslog into the SIEM with user names pseudonymised and e-mail addresses masked - IPs kept for correlation.Logs
- Windows event logs, reduced: noisy events dropped, rendered text removedWindows events with the structured fields kept, the duplicated rendered text removed and the chattiest event IDs dropped.Logs