Event log enrichment

Event log enrichments can be added to the log events, for example, an attribute can be added to the Subject property in the Event, static log event attributes can be added to all log messages processed within the agent and log event attributes can be removed from all log messages processed within the agent. To do so, you need to edit the etc/org.talend.eventlogging.agent.cfg configuration file.

• To map an attribute to the Subject property in the Event, edit the following parameter:

  event.map.subject = Subject

• To retrieve the correlation ID from custom_Info, edit the following parameter:

  event.map.correlationid = CorrelationID

• To add static log event attributes to all log messages processed within the agent, edit this parameter: event.add.[attribute-name] = [value]

  Example:

  event.add.logSource.country=Germany
  event.add.logSource.city=Bonn
  event.add.customInfo.projectID=POC Talend ESB

  Currently only event.add.logSource.[sub-attribute] and event.add.customInfo.[sub-attribute] are supported. Becareful, once the values defined here, they will override any previously existing values within the log event.

• To remove log event attributes from all log messages processed within the agent, edit this parameter: event.remove.[attribute-name]

  Example:

  #event.remove.logSource.class.name
  #event.remove.customInfo.activemq.broker

  Currently only event.remove.logSource.[sub-attribute] and event.remove.customInfo.[sub-attribute] are supported. This feature is especially helpful if you need to remove (customInfo) MDC properties from third party components.