Transformer: Rewrite

Use this transformer to rewrite the content of DNS messages according to the structure. For more details, see the feature request here.

Only fields with int and string types are supported.

Options:

identifiers (map)

Expect a key/value where the key is the name of the field to rewrite (Please refer to the flat-json output to see all identifier keys ) and the value is the new one.

Config example to remove the DNStap version and update the identity name.

transforms:
  rewrite:
    identifiers:
      dnstap.version: ""
      dnstap.identity: "foo"