manticoresearch/.translation-cache/Integration/Vectordev.md.json

{
    "67f4d584fda4a75a49932b298ec02809bc54f16e86ac60ae195f9e3428e79489": {
        "original": "# Integration with Vector.dev\n\n> NOTE: The integration with Fluent Bit requires [Manticore Buddy](../Installation/Manticore_Buddy.md). If it doesn't work, make sure Buddy is installed.\n\n[Vector by Datadog](https://vector.dev/) is an open source observability data pipeline that can collect, transform, and route logs or metrics. While Vector can aggregate the data by itself, pairing it with Manticore provides a purpose-built storage and search layer.\n\nThe example below shows how to forward Debian's `dpkg.log` through Vector.dev and index it in Manticore.\n\n## Example log structure\n\nCODE_BLOCK_0\n\n## Vector.dev configuration\n\nCreate a `vector.toml` similar to the following:\n\nCODE_BLOCK_1\n\n- `endpoints` points to Manticore's HTTP interface (port `9308` by default). Adjust it if your instance listens elsewhere.\n- The `remap` transform moves Vector's default `timestamp` field to `vec_timestamp`, because `timestamp` is reserved in Manticore.\n- `bulk.index` defines the table that will be created automatically when Vector starts sending data.\n\nStart Vector.dev with this configuration and it will tail the log file, transform each event, and forward it directly to Manticore.\n\n## Running Vector.dev\n\nSave the configuration as `vector.toml`, then start the agent:\n\nCODE_BLOCK_2\n\nIf you run Vector.dev in Docker, mount both the config file and the log directory, for example:\n\nCODE_BLOCK_3\n\n## Vector.dev Results\n\nWhen the pipeline runs, Manticore creates the `dpkg_log` table automatically. Its schema and example documents look like this:\n\nCODE_BLOCK_4\n\n## Conclusion\n\nUsing Vector.dev with Manticore lets you collect logs from virtually any source, enrich or sanitize them in-flight, and store the results in a search-ready database. This workflow keeps observability pipelines simple while still enabling advanced transformations when needed.\n",
        "translations": {
            "chinese": "# \u4e0e Vector.dev \u7684\u96c6\u6210\n\n> \u6ce8\u610f\uff1a\u4e0e Fluent Bit \u7684\u96c6\u6210\u9700\u8981 [Manticore Buddy](../Installation/Manticore_Buddy.md)\u3002\u5982\u679c\u65e0\u6cd5\u6b63\u5e38\u5de5\u4f5c\uff0c\u8bf7\u786e\u4fdd\u5df2\u5b89\u88c5 Buddy\u3002\n\n[Vector by Datadog](https://vector.dev/) \u662f\u4e00\u4e2a\u5f00\u6e90\u7684\u53ef\u89c2\u6d4b\u6027\u6570\u636e\u7ba1\u9053\uff0c\u53ef\u4ee5\u6536\u96c6\u3001\u8f6c\u6362\u548c\u8def\u7531\u65e5\u5fd7\u6216\u6307\u6807\u3002\u867d\u7136 Vector \u53ef\u4ee5\u81ea\u884c\u805a\u5408\u6570\u636e\uff0c\u4f46\u5c06\u5176\u4e0e Manticore \u914d\u5408\u4f7f\u7528\u53ef\u63d0\u4f9b\u4e13\u7528\u7684\u5b58\u50a8\u548c\u641c\u7d22\u5c42\u3002\n\n\u4ee5\u4e0b\u793a\u4f8b\u5c55\u793a\u4e86\u5982\u4f55\u901a\u8fc7 Vector.dev \u8f6c\u53d1 Debian \u7684 `dpkg.log`\uff0c\u5e76\u5c06\u5176\u7d22\u5f15\u5230 Manticore \u4e2d\u3002\n\n## \u793a\u4f8b\u65e5\u5fd7\u7ed3\u6784\n\nCODE_BLOCK_0\n\n## Vector.dev \u914d\u7f6e\n\n\u521b\u5efa\u4e00\u4e2a\u7c7b\u4f3c\u4e8e\u4ee5\u4e0b\u5185\u5bb9\u7684 `vector.toml`\uff1a\n\nCODE_BLOCK_1\n\n- `endpoints` \u6307\u5411 Manticore \u7684 HTTP \u63a5\u53e3\uff08\u9ed8\u8ba4\u7aef\u53e3\u4e3a `9308`\uff09\u3002\u5982\u679c\u60a8\u7684\u5b9e\u4f8b\u5728\u5176\u4ed6\u4f4d\u7f6e\u76d1\u542c\uff0c\u8bf7\u8fdb\u884c\u8c03\u6574\u3002\n- `remap` \u8f6c\u6362\u5c06 Vector \u7684\u9ed8\u8ba4 `timestamp` \u5b57\u6bb5\u79fb\u52a8\u5230 `vec_timestamp`\uff0c\u56e0\u4e3a `timestamp` \u5728 Manticore \u4e2d\u662f\u4fdd\u7559\u5b57\u6bb5\u3002\n- `bulk.index` \u5b9a\u4e49\u4e86\u5f53 Vector \u5f00\u59cb\u53d1\u9001\u6570\u636e\u65f6\u5c06\u81ea\u52a8\u521b\u5efa\u7684\u8868\u3002\n\n\u4f7f\u7528\u6b64\u914d\u7f6e\u542f\u52a8 Vector.dev\uff0c\u5b83\u5c06\u8ddf\u8e2a\u65e5\u5fd7\u6587\u4ef6\uff0c\u8f6c\u6362\u6bcf\u4e2a\u4e8b\u4ef6\uff0c\u5e76\u76f4\u63a5\u5c06\u5176\u8f6c\u53d1\u5230 Manticore\u3002\n\n## \u8fd0\u884c Vector.dev\n\n\u5c06\u914d\u7f6e\u4fdd\u5b58\u4e3a `vector.toml`\uff0c\u7136\u540e\u542f\u52a8\u4ee3\u7406\uff1a\n\nCODE_BLOCK_2\n\n\u5982\u679c\u5728 Docker \u4e2d\u8fd0\u884c Vector.dev\uff0c\u8bf7\u6302\u8f7d\u914d\u7f6e\u6587\u4ef6\u548c\u65e5\u5fd7\u76ee\u5f55\uff0c\u4f8b\u5982\uff1a\n\nCODE_BLOCK_3\n\n## Vector.dev \u7ed3\u679c\n\n\u5f53\u7ba1\u9053\u8fd0\u884c\u65f6\uff0cManticore \u4f1a\u81ea\u52a8\u521b\u5efa `dpkg_log` \u8868\u3002\u5176\u6a21\u5f0f\u548c\u793a\u4f8b\u6587\u6863\u5982\u4e0b\u6240\u793a\uff1a\n\nCODE_BLOCK_4\n\n## \u7ed3\u8bba\n\n\u5c06 Vector.dev \u4e0e Manticore \u7ed3\u5408\u4f7f\u7528\uff0c\u60a8\u53ef\u4ee5\u4ece\u51e0\u4e4e\u6240\u6709\u6765\u6e90\u6536\u96c6\u65e5\u5fd7\uff0c\u5728\u4f20\u8f93\u8fc7\u7a0b\u4e2d\u4e30\u5bcc\u6216\u6e05\u7406\u65e5\u5fd7\uff0c\u5e76\u5c06\u7ed3\u679c\u5b58\u50a8\u5728\u53ef\u641c\u7d22\u7684\u6570\u636e\u5e93\u4e2d\u3002\u6b64\u5de5\u4f5c\u6d41\u7a0b\u5728\u4fdd\u6301\u53ef\u89c2\u6d4b\u6027\u7ba1\u9053\u7b80\u5355\u7684\u540c\u65f6\uff0c\u4ecd\u53ef\u5728\u9700\u8981\u65f6\u542f\u7528\u9ad8\u7ea7\u8f6c\u6362\u3002\n",
            "russian": "# \u0418\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 Vector.dev\n\n> \u041f\u0420\u0418\u041c\u0415\u0427\u0410\u041d\u0418\u0415: \u0418\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 Fluent Bit \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f [Manticore Buddy](../Installation/Manticore_Buddy.md). \u0415\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u0441\u044c, \u0447\u0442\u043e Buddy \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.\n\n[Vector \u043e\u0442 Datadog](https://vector.dev/) \u2014 \u044d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433\u0438 \u0438\u043b\u0438 \u043c\u0435\u0442\u0440\u0438\u043a\u0438. \u0425\u043e\u0442\u044f Vector \u043c\u043e\u0436\u0435\u0442 \u0430\u0433\u0440\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e, \u0435\u0433\u043e \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0441 Manticore \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0438\u0441\u043a\u0430.\n\n\u041f\u0440\u0438\u043c\u0435\u0440 \u043d\u0438\u0436\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c `dpkg.log` Debian \u0447\u0435\u0440\u0435\u0437 Vector.dev \u0438 \u0438\u043d\u0434\u0435\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0432 Manticore.\n\n## \u041f\u0440\u0438\u043c\u0435\u0440 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043b\u043e\u0433\u0430\n\nCODE_BLOCK_0\n\n## \u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Vector.dev\n\n\u0421\u043e\u0437\u0434\u0430\u0439\u0442\u0435 `vector.toml`, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443:\n\nCODE_BLOCK_1\n\n- `endpoints` \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 HTTP-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Manticore (\u043f\u043e\u0440\u0442 `9308` \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e). \u0418\u0437\u043c\u0435\u043d\u0438\u0442\u0435 \u0435\u0433\u043e, \u0435\u0441\u043b\u0438 \u0432\u0430\u0448 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0441\u043b\u0443\u0448\u0430\u0435\u0442 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u043c \u043f\u043e\u0440\u0442\u0443.\n- \u041f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 `remap` \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0435\u0442 \u043f\u043e\u043b\u0435 `timestamp` \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e Vector \u0432 `vec_timestamp`, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e `timestamp` \u0437\u0430\u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0432 Manticore.\n- `bulk.index` \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 \u0442\u0430\u0431\u043b\u0438\u0446\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043a\u043e\u0433\u0434\u0430 Vector \u043d\u0430\u0447\u043d\u0451\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u0417\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0435 Vector.dev \u0441 \u044d\u0442\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439, \u0438 \u043e\u043d \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u043b\u043e\u0433\u0430, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u043a\u0430\u0436\u0434\u043e\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0435\u0433\u043e \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 Manticore.\n\n## \u0417\u0430\u043f\u0443\u0441\u043a Vector.dev\n\n\u0421\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043a\u0430\u043a `vector.toml`, \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0435 \u0430\u0433\u0435\u043d\u0442:\n\nCODE_BLOCK_2\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0435 Vector.dev \u0432 Docker, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u043a\u0430\u043a \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0442\u0430\u043a \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0441 \u043b\u043e\u0433\u0430\u043c\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440:\n\nCODE_BLOCK_3\n\n## \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b Vector.dev\n\n\u041a\u043e\u0433\u0434\u0430 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, Manticore \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0442\u0430\u0431\u043b\u0438\u0446\u0443 `dpkg_log`. \u0415\u0451 \u0441\u0445\u0435\u043c\u0430 \u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0442\u0430\u043a:\n\nCODE_BLOCK_4\n\n## \u0417\u0430\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Vector.dev \u0441 Manticore \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u043b\u043e\u0433\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0438\u0437 \u043b\u044e\u0431\u043e\u0433\u043e \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430, \u043e\u0431\u043e\u0433\u0430\u0449\u0430\u0442\u044c \u0438\u043b\u0438 \u043e\u0447\u0438\u0449\u0430\u0442\u044c \u0438\u0445 \u043d\u0430 \u043b\u0435\u0442\u0443 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0433\u043e\u0442\u043e\u0432\u043e\u0439 \u043a \u043f\u043e\u0438\u0441\u043a\u0443. \u042d\u0442\u043e\u0442 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u044b \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0441\u0442\u044b\u043c\u0438, \u043d\u043e \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u043e\u0433\u0434\u0430 \u044d\u0442\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e.\n"
        },
        "is_code_or_comment": false,
        "model": "deepseek/deepseek-v3.2",
        "updated_at": 1767865501
    },
    "__meta": {
        "source_text": "# Integration with Vector.dev\n\n> NOTE: The integration with Fluent Bit requires [Manticore Buddy](../Installation/Manticore_Buddy.md). If it doesn't work, make sure Buddy is installed.\n\n[Vector by Datadog](https://vector.dev/) is an open source observability data pipeline that can collect, transform, and route logs or metrics. While Vector can aggregate the data by itself, pairing it with Manticore provides a purpose-built storage and search layer.\n\nThe example below shows how to forward Debian's `dpkg.log` through Vector.dev and index it in Manticore.\n\n## Example log structure\n\n```\n2023-05-31 10:42:55 status triggers-awaited ca-certificates-java:all 20190405ubuntu1.1\n2023-05-31 10:42:55 trigproc libc-bin:amd64 2.31-0ubuntu9.9 <none>\n2023-05-31 10:42:55 status half-configured libc-bin:amd64 2.31-0ubuntu9.9\n2023-05-31 10:42:55 status installed libc-bin:amd64 2.31-0ubuntu9.9\n2023-05-31 10:42:55 trigproc systemd:amd64 245.4-4ubuntu3.21 <none>\n```\n\n## Vector.dev configuration\n\nCreate a `vector.toml` similar to the following:\n\n```toml\n[sources.test_file]\ntype = \"file\"\ninclude = [ \"/var/log/dpkg.log\" ]\n\n[transforms.modify_test_file]\ntype = \"remap\"\ninputs = [ \"test_file\" ]\nsource = \"\"\"\n.vec_timestamp = del(.timestamp)\"\"\"\n\n[sinks.manticore]\ntype = \"elasticsearch\"\ninputs = [ \"modify_test_file\" ]\nendpoints = [\"http://127.0.0.1:9308\"]\nbulk.index = \"dpkg_log\"\n```\n\n- `endpoints` points to Manticore's HTTP interface (port `9308` by default). Adjust it if your instance listens elsewhere.\n- The `remap` transform moves Vector's default `timestamp` field to `vec_timestamp`, because `timestamp` is reserved in Manticore.\n- `bulk.index` defines the table that will be created automatically when Vector starts sending data.\n\nStart Vector.dev with this configuration and it will tail the log file, transform each event, and forward it directly to Manticore.\n\n## Running Vector.dev\n\nSave the configuration as `vector.toml`, then start the agent:\n\n```\nvector --config vector.toml\n```\n\nIf you run Vector.dev in Docker, mount both the config file and the log directory, for example:\n\n```\ndocker run --rm -v /var/log/dpkg.log:/var/log/dpkg.log:ro \\\n  -v $(pwd)/vector.toml:/etc/vector/vector.toml:ro \\\n  timberio/vector:latest --config /etc/vector/vector.toml\n```\n\n## Vector.dev Results\n\nWhen the pipeline runs, Manticore creates the `dpkg_log` table automatically. Its schema and example documents look like this:\n\n```\nmysql> DESCRIBE dpkg_log;\n+-----------------+---------+--------------------+\n| Field           | Type    | Properties         |\n+-----------------+---------+--------------------+\n| id              | bigint  |                    |\n| file            | text    | indexed stored     |\n| host            | text    | indexed stored     |\n| message         | text    | indexed stored     |\n| source_type     | text    | indexed stored     |\n| vec_timestamp   | text    | indexed stored     |\n+-----------------+---------+--------------------+\n\nmysql> SELECT * FROM dpkg_log LIMIT 3\\G\n*************************** 1. row ***************************\nid: 7856533729353672195\nfile: /var/log/dpkg.log\nhost: logstash-787f68f6f-nhdd2\nmessage: 2023-06-05 14:03:04 startup archives install\nsource_type: file\nvec_timestamp: 2023-08-04T15:32:50.203091741Z\n*************************** 2. row ***************************\nid: 7856533729353672196\nfile: /var/log/dpkg.log\nhost: logstash-787f68f6f-nhdd2\nmessage: 2023-06-05 14:03:04 install base-passwd:amd64 <none> 3.5.47\nsource_type: file\nvec_timestamp: 2023-08-04T15:32:50.203808861Z\n*************************** 3. row ***************************\nid: 7856533729353672197\nfile: /var/log/dpkg.log\nhost: logstash-787f68f6f-nhdd2\nmessage: 2023-06-05 14:03:04 status half-installed base-passwd:amd64 3.5.47\nsource_type: file\nvec_timestamp: 2023-08-04T15:32:50.203814031Z\n```\n\n## Conclusion\n\nUsing Vector.dev with Manticore lets you collect logs from virtually any source, enrich or sanitize them in-flight, and store the results in a search-ready database. This workflow keeps observability pipelines simple while still enabling advanced transformations when needed.\n",
        "updated_at": 1768530797,
        "source_md5": "e01e1ea9162413df79b6d877ef2fd2b7"
    }
}