OTel LogRecord Mapping

[pagbabian-splunk]

OCSF Log Record Mapping to OTel.docx

Here is a sample for how OCSF can be mapped in to OTel's Log Records. Some questions still need to be answered but an arbitrary starting point is shown here in the uploaded Word document.

[atoulme]

Here is a collector connector that translates log events to OCSF events. It's a toy for now to show a path forward: open-telemetry/opentelemetry-collector-contrib#47461

The connector applies a regular expression to logs. If it matches, it creates an OCSF event. The regular expression capture groups are available to be included in the OCSF event message.

[pagbabian-splunk]

Thanks Antoine for this. Let me take a look.