@@ -8,7 +8,7 @@ Before diving into [Fluent Bit](https://fluentbit.io) you might want to get acqu
8
8
with some of the key concepts of the service. This document provides an
9
9
introduction to those concepts and common [ Fluent Bit] ( https://fluentbit.io )
10
10
terminology. Reading this document will help you gain a more general understanding of the
11
- log and stream processor.
11
+ following topics:
12
12
13
13
- Event or Record
14
14
- Filtering
@@ -31,17 +31,17 @@ Jan 18 12:52:16 flb systemd[2222]: Started GNOME Terminal Server.
31
31
Jan 18 12:52:16 flb gsd-media-keys[2640]: # watch_fast: "/org/gnome/terminal/legacy/" (establishing: 0, active: 0)
32
32
```
33
33
34
- It contains four lines, representing four independent Events.
34
+ It contains four lines that represent four independent Events.
35
35
36
- Internally, an Event is comprised of:
36
+ An Event is comprised of:
37
37
38
38
- timestamp
39
39
- key/value metadata (v2.1.0 and greater)
40
40
- payload
41
41
42
42
### Event format
43
43
44
- The Fluent Bit wire protocol represents an Event as a 2 -element array
44
+ The Fluent Bit wire protocol represents an Event as a two -element array
45
45
with a nested array as the first element:
46
46
47
47
``` javascript copy
52
52
53
53
- _ ` TIMESTAMP ` _ is a timestamp in seconds as an integer or floating point value
54
54
(not a string).
55
- - _ ` METADATA ` _ is a possibly empty object containing event metadata.
55
+ - _ ` METADATA ` _ is an object containing event metadata, and might be empty .
56
56
- _ ` MESSAGE ` _ is an object containing the event body.
57
57
58
58
Fluent Bit versions prior to v2.1.0 used:
@@ -66,7 +66,7 @@ streams.
66
66
67
67
## Filtering
68
68
69
- You might need to perform modifications on the Event's content. The process to alter,
69
+ You might need to perform modifications on an Event's content. The process to alter,
70
70
append to, or drop Events is called [ _ filtering_ ] ( data-pipeline/filter.md ) .
71
71
72
72
Use filtering to:
@@ -97,8 +97,8 @@ Matches, see [Routing](data-pipeline/router.md).
97
97
98
98
## Timestamp
99
99
100
- The timestamp represents the time an Event was created. Every Event contains a
101
- timestamp associated. A timestamp always exists , and is set by the Input plugin or
100
+ The timestamp represents the time an Event was created. Every Event contains an
101
+ associated timestamps. All events have timestamps , and they're set by the input plugin or
102
102
discovered through a data parsing process.
103
103
104
104
The timestamp is a numeric fractional integer in the format:
@@ -114,8 +114,8 @@ where:
114
114
115
115
## Match
116
116
117
- Fluent Bit lets you deliver your collected and processed Events to one or multiple
118
- destinations through a routing phase . A _ Match_ represents a rule to select Events
117
+ Fluent Bit lets you route your collected and processed Events to one or multiple
118
+ destinations. A _ Match_ represents a rule to select Events
119
119
where a Tag matches a defined rule.
120
120
121
121
To learn more about Tags and Matches, see [ Routing] ( data-pipeline/router.md ) .
@@ -124,7 +124,7 @@ To learn more about Tags and Matches, see [Routing](data-pipeline/router.md).
124
124
125
125
Source events can have a structure. A structure defines a set of ` keys ` and ` values `
126
126
inside the Event message to implement faster operations on data modifications.
127
- Fluent Bit handles every Event message as a structured message.
127
+ Fluent Bit treats every Event message as a structured message.
128
128
129
129
Consider the following two messages:
130
130
0 commit comments