policy

Loads a YAML policy file that can rename or drop keys before transformation.

This parameter applies to JSON Dotted Key Transformer (mmjsontransform).

Name:

policy

Scope:

input

Type:

string

Default:

unset

Required?:

no

Introduced:

8.2602.0

Description

When set, mmjsontransform loads a YAML policy file during startup and re-checks it on HUP. If the file’s mtime changed, the module reloads it; when reload fails, the previous in-memory policy is kept. The current implementation supports these sections:

map.rename

Mapping of source keys to destination keys. Both keys are dotted JSON paths.

map.drop

Sequence of dotted JSON paths that should be removed before transformation.

The policy is applied before the regular mode processing. This makes it possible to drop noisy fields and normalize names in one action invocation.

If rsyslog is compiled without libyaml support, setting policy produces a configuration error.

Input usage

action(type="mmjsontransform"
       policy="/etc/rsyslog/mmjsontransform-policy.yaml"
       input="$!raw" output="$!normalized")

See also

See also the main mmjsontransform module documentation.

---

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2026 Rainer Gerhards and others. Licensed under the Apache License 2.0.