Transform events exception.message using replace_pattern

[al-mcintosh]

Hi everyone,
I'm trying to normalize exceptions by replacing UUIDs found in exception.message with the text '{UUID}' using the transform processor replace_pattern with the following:

transform:
        trace_statements:
        - context: span
          statements:
          - replace_pattern(events.attributes["exception.message"], "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}", "{UUID}")

Example text: "exception.message": "Error occured: key NotFound for object f777277a-694f-4444-a3f0-5e60386c01c7"

Thanks.

[al-mcintosh]

In the 'span' context, events.attributes type is ptrace.SpanEventSlice and the transform replace functions work with pcommon.Map

In order to transform events.attributes, you must use trace_statements.context: spanevent and replace on attributes.