Chronosphere Logo
ProductsSolutionsCompanyResourcesContact
  • Chronosphere Docs
  • OBSERVABILITY PLATFORM
  • Overview
    • Architecture
    • Sign in
    • Guides
  • Navigate
    • Pinned scopes
  • Observe
    • Dashboards
      • Panels
        • Time series
        • Bar chart
        • Heat map
        • Table
        • Gauge
        • Stat chart
        • Markdown
      • Customize
        • Layouts
        • Time ranges
        • Variables
      • Query traces
      • Chronosphere-managed dashboards
      • Classic dashboards
        • Import Grafana dashboards
        • Time series chart
        • Panels
    • Services
      • Service pages
      • Service exploration
  • Investigate
    • Change events
      • Filter
      • View and create
      • Enable events
    • Distributed traces
      • Trace Explorer
        • Search and filter
        • Differential diagnosis
        • Overlay events
        • View services
        • Create links
        • Features overview
      • Trace Analyzer
      • Trace Metrics
      • Examples
    • Logs
      • Key concepts
      • Configure LogScale
      • Query logs
      • Configure alerting
        • Actions
        • Alerts
        • Scheduled searches
      • Create dashboards
      • External tasks
    • Metrics
      • Live Telemetry Analyzer
      • Telemetry Usage Analyzer
      • Metrics Explorer
      • Troubleshooting
      • Dictionary
    • Querying
      • Query Builder
      • Query Analyzer
      • Fixing slow queries
      • Query protections
      • Derived telemetry
        • Query derived labels
        • Manage derived labels
        • Value mapping
        • Derived metrics
      • Glob syntax
  • Control
    • Metric shaping
      • Metric types
      • Reduce stored metrics
        • Rollup rules
        • Recording rules
        • Mapping rules
        • Drop rules
        • Evaluation failures
      • Aggregation rules UI
      • Shaping impact preview
      • Metrics quotas
        • View pools
        • Manage pools
      • Long-term downsampling
      • Reduce cardinality
    • Trace sampling
      • Datasets
      • Behaviors
      • Head sampling
      • Tail sampling
    • Storage concepts
    • Control entities
  • Alerting
    • Monitors
      • Monitor data model
      • Monitor details
    • Notifications
      • Notifiers
        • Discard
        • Email
        • incident.io
        • Opsgenie
        • PagerDuty
        • Slack
        • VictorOps
        • Webhook
      • Notification policies
      • Signals
    • Muting rules
    • Alert metrics
    • Troubleshooting
  • Administer
    • Accounts and teams
      • User accounts
      • Personal access tokens
      • Service accounts
      • Teams
      • Okta user synchronization
    • Collections
      • Team and collection home pages
      • Migrate from buckets
    • Integrations
      • Slack graph unfurling
    • Audit logs
    • Infrastructure as code
      • Terraform provider
        • Install
        • Release notes
      • Pulumi provider
    • Licensing concepts
    • Service configuration
  • Ingest
    • Metrics and traces
      • OpenTelemetry Collector
        • Configure collector
        • Configure ingestion
      • Chronosphere Collector
        • Install
          • Kubernetes (metrics)
          • Kubernetes (traces)
          • Standalone
          • Upgrade
        • Configure
          • Apply optimizations
          • Serve as a Prometheus backend
          • Scrape Prometheus native histograms
        • Discover
          • Monitor Kubernetes metrics
          • Scrape
        • Verify and monitor
          • Verify metrics
          • Verify traces
          • Monitor Collector
        • Mappings
          • Datadog
            • Querying
            • Migration considerations
            • Monitor migration
            • Recreate widgets
            • Prometheus API
            • Prometheus metric naming recommendations
            • Prometheus Operator differences
          • SignalFx
          • Wavefront
        • Additional metrics
          • Wavefront
          • SignalFx
          • DogStatsD
          • StatsD
          • Carbon
          • Prometheus Pushgateway
          • Prometheus and OpenMetrics
        • Debug endpoints
      • Google Cloud
      • Amazon Web Services (AWS)
      • Troubleshooting
    • Change events
      • AWS EventBridge
      • Buildkite
      • CircleCI
      • GitHub
      • GitLab
      • Google Cloud
      • LaunchDarkly
    • Logs
      • Recommended configuration
      • Existing configuration
      • OpenTelemetry Collector
    • Data limits
      • Events
      • Traces
      • Metrics
  • Chronoctl
    • Install
    • v2 Alerts
  • Chronosphere API
    • Pagination
    • Config endpoint reference (opens in a new tab)
    • State endpoint reference (opens in a new tab)
    • Data endpoint reference (opens in a new tab)
  • TELEMETRY PIPELINE
  • Overview
    • Architecture
    • Security
    • Release notes
    • Component versions
  • Install
    • Prerequisites
    • Linux
      • Red Hat Enterprise Linux
      • Ubuntu Server Linux
      • Troubleshooting
    • Kubernetes
      • Web interface
      • Pipeline CLI
      • Helm
    • Upgrade
    • Uninstall
  • Configure
    • Core Operator and Core Instance
      • Helm reference
      • Update a project token
      • Troubleshoot
    • History and rollback
    • Resource labels
    • Resource profiles
    • Scaling
    • Secrets
    • Service types and ports
    • Use an HTTP proxy
  • Data
    • Route
      • Create and modify pipelines
      • Automated Kubernetes logging
      • Plugins
        • Source
          • Absolute
          • Amazon Kinesis Firehose
          • Amazon Kinesis Stream Input
          • Azure Event Grid
          • Azure Event Hub
          • Bash Command
          • Cloudflare
          • Confluent Cloud
          • Datadog Agent
          • Datagen
          • Dummy logs, metrics, and traces
          • Elasticsearch HTTP
          • Fluent Bit
          • Fluentd
          • Forward
          • Google Cloud PubSub Input
          • Google Workspace Audit
          • HTTP
          • HTTP API collector
          • Microsoft Intune - Audit event
          • Kafka
          • Kubernetes
          • Mandiant ASM
          • Mock Data
          • Okta System Logs Collector
          • OpenTelemetry
          • Prometheus Remote Write
          • Prometheus Scrape
          • S3 Input (One Time)
          • S3 Input (SQS)
          • Signal Sciences
          • Slack
          • Splunk HEC
          • Splunk UF
          • SQL DB Input
          • Syslog
          • TCP
          • Telegraf
          • Vectra M365 - Incident Detection
          • Vercel Logs
        • Destination
          • Amazon CloudWatch
          • Amazon Kinesis Firehose
          • Amazon Kinesis Streams
          • Amazon S3
          • Axiom
          • Azure Blob Storage
          • Azure Data Explorer
          • Azure EventHub
          • Azure Logs Ingestion API
          • Azure Monitor
          • Azure Sentinel
          • Chronosphere
          • Clickhouse
          • Confluent Cloud
          • Coralogix
          • Crowdstrike
          • Datadog
          • Devo Cloud
          • Dynatrace
          • Elasticsearch
          • Exabeam
          • Forward
          • Google Chronicle
          • Google Cloud Big Query
          • Google Cloud Operations Suite
          • Grafana Loki
          • Graylog
          • HTTP
          • InfluxDB
          • Kafka
          • New Relic
          • Null
          • Observe
          • Oracle
          • OpenSearch
          • OpenTelemetry
          • Prometheus Exporter
          • Prometheus Remote Write
          • Redpanda Cloud
          • Scalyr
          • Slack
          • Splunk
          • Standard output
          • Sumo Logic
          • Syslog
          • TCP
          • UDP
          • VictoriaMetrics
          • Vivo
      • Troubleshooting
    • Process
      • Parsers
      • Stream processing
      • Processing rules
        • Add/set key/value
        • Aggregate records
        • Allow keys
        • Allow records
        • Block keys
        • Block records
        • Copy keys
        • Custom Lua
        • Decode CSV
        • Decode JSON
        • Deduplicate records
        • Delete key
        • Encode CSV
        • Encode JSON
        • Extract keys/values
        • Flatten subrecord
        • Hash key
        • Join records
        • Lift submap
        • Multiline join
        • Nest keys
        • Parse
        • Parse number
        • Random sampling
        • Redact/mask value
        • Rename keys
        • Search/replace value
        • Split record
  • Fleets
    • Add an agent to a fleet
    • Add fleet configuration files
    • Core Agent
  • Administer
    • Monitoring
  • Pipeline CLI
    • Install
    • Pipeline operations
    • Core Instance operations
  • MORE INFORMATION
  • Support
  • Service status
  • Compliance

On This Page

  • Configuration parameters
TELEMETRY PIPELINE
Data
Process
Processing rules
Custom Lua

Custom Lua

Chronosphere Telemetry Pipeline has a custom Lua processing rule.

Configuration parameters

  • Script
  • Comment
Copy keysDecode CSV
©2024 Chronosphere
All Rights ReservedPrivacy PolicyEU Applicant Notice