Skip to main content
Ent+
This feature is available as an add-on for the Honeycomb Enterprise plan. Please contact your Honeycomb account team for details.

Filter by Condition Processor

The Filter by Condition processor can be used to include or exclude telemetry based on a condition that is evaluated against the telemetry data.

Supported Types

MetricsLogsTraces

Configuration

FieldDescription
Choose Telemetry TypeThe types of telemetry to filter.
ActionThe action to take when the condition is met. Include will retain matching telemetry. Exclude will remove matching telemetry.
ConditionThe condition to match against telemetry to include or exclude based on the action.

Example Configuration

Excluding matching log records

In this example, we exclude logs that have all of the following:
  • A host.name resource attribute that equals dev-server
  • An environment attribute that equals dev
  • A remote-ip log body field that equals 127.0.0.1

Web Interface

Honeycomb Docs - Filter by Condition

API Reference

This processor can be defined as yaml and applied using the CLI or API.

Type

filter-by-condition

Parameters

ParameterTypeDefaultDescription
telemetry_typestelemetrySelector["Logs", "Metrics", "Traces"]The types of telemetry to filter.
actionenumexcludeThe action to take when the condition is met. Include will retain matching telemetry. Exclude will remove matching telemetry.
conditioncondition{"ottl":""}The condition to match against telemetry to include or exclude based on the action.

Standalone Processor

apiVersion: bindplane.observiq.com/v1
kind: Processor
metadata:
  name: filter-by-condition-example
spec:
  type: filter-by-condition
  parameters:
    - name: telemetry_types
      value:
        - Logs
    - name: action
      value: exclude
    - name: condition
      value:
        ottl: (resource.attributes["host.name"] == "dev-server" and attributes["environment"] == "dev" and body["remote-ip"] == "127.0.0.1")
        ui:
          statements:
            - key: host.name
              match: resource
              operator: Equals
              value: dev-server
            - key: environment
              match: attributes
              operator: Equals
              value: dev
            - key: remote-ip
              match: body
              operator: Equals
              value: 127.0.0.1