Logs enable and disable

[adedokunk]

I'm not sure if vector sink as something like these will this work:

sinks._logs
type = sink
inputs = '''
  if get_env("DD_EXCLUDE_LOGS", "true") == "true" {
    "trn_exclude_logs"
  } else {
    "datadog.logs"
  }
'''

trn_exclude_log:
      type: filter
      condition: '''
         if (env!("DD_EXCLUDE_LOGS", "false") == "true"){
          true
         } else {
            !(.level == "INFO" || .status == "info") &&
            !(.logger_name == "INBOUND_REQUEST") &&
            !(.status == "DEBUG") &&
            !(.status == "warn")
            !(.status == "info")
         }
        '''

@pront can you help with these

[pront]

Hi @adedokunk, are you experiencing problems with a Vector sink? Can you please post your full configuration? Also, do you see any error messages? You can also use VECTOR_LOG=debug to increase the verbosity.

[adedokunk]

Here is the error:
error[E105]: call to undefined function 2025-02-07 02:35:00.718Z ┌─ :1:1 2025-02-07 02:35:00.718Z │ 2025-02-07 02:35:00.718Z 1 │ get_env("DD_EXCLUDE_LOGS", "true") == "true" && 2025-02-07 02:35:00.718Z │ ^^^^^^^ 2025-02-07 02:35:00.718Z │ │ 2025-02-07 02:35:00.718Z │ undefined function 2025-02-07 02:35:00.718Z │ did you mean "get"? 2025-02-07 02:35:00.718Z │

[adedokunk]

I get it deployed with the help os playground

[adedokunk]

but when i flip to false the logs are still excluded

[adedokunk]

@pront any idea

[adedokunk]

With the condition the logs exclusion is working fine now, But the True & False are working the same way. I deploy configMap with the variable set to true so that i can patch. What can be the problem here @pront

type: filter
      condition: |
          exclude_logs = get_env_var("DD_EXCLUDE_LOGS") ?? "true"

          if exclude_logs == "true" {
            !(.level == "INFO" || .status == "info" ) &&
            !(.logger_name == "INBOUND_REQUEST" ) &&
            !(.status == "DEBUG" ) &&
            !(.status == "warn" )
          } else {
              false  # Allow all logs (disable filtering)
          }

[adedokunk]

Thank you all for the support

[pront]

Hi @adedokunk, glad you got your issue resolved. Out of curiosity, was it a wrong condition?