Troubleshooting VRL Function Query Run

Ted

Hi, I just try VRL Function with dot ' . ' (see the pic) , querier pod got OOMKilled immediately. I install HA Deployment on k8s via helm chart without any resource limit configure. Is it issue of VRL function? Node pool: 2 CPU 16G Ram

Ashish

are you trying function at query time?

Ashish

if yes and if you are trying it on hugh amount of data..it can cause OOM

Ted

No, I just enter one dot. " . "

Ashish

yes it can cause OOM

Ashish

try removing .

Ashish

and querying

Ashish

what are trying to achieve with vrl?

Ted

I'm trying to learn VRL Function. I want to remove_unused_k8s_fileds like in pic (from ). But I can't find any example to do that. After that I want to using VRL function to parse my golang application log

Ashish

what we suggest is use vrl functions during query time on small data ..by keeping time window to 1 min etc

Ashish

del(._p) del(.kubernetes_container_hash) del(.kubernetes_docker_id) del(.kubernetes_pod_id) del(.kubernetes_labels_pod_template_hash) del(.kubernetes_annotations_checksum_luascripts) del(.kubernetes_annotations_checksum_config) .

Ashish

you can try above code snippet with appropriate field names to remove unused fields

Ashish

once you finzalize your function

Ashish

associate it with steam so that function works at data ingestion

Ashish

Ashish

check this video

Ted

ok, I try with 1min frame and it's working now. Thank you! I just read docs at . Can I using this?

Ashish

yes these should work..as long as you have appropriate data

Ted

Yay, thank you so much!

Ashish

welcome

Ted

Hi, can I ask 1 more question. I want to parse this log to the table. What function do I need to parse it?

Ashish

Ashish

check if this helps

Ashish

you can use

Ted

yes, thank you! :pray: