Functions Overview
In OpenObserve, functions are VRL (Vector Remap Language) scripts that transform your stream data. You create and manage functions via the OpenObserve UI or API. In the UI, go to Data > Functions to open a built-in editor where you can write, test, and save VRL code. Once saved, a function can be added to a pipeline as a Function node so it runs on incoming data at ingest time. The Enterprise Edition and Cloud also support JavaScript functions; pipelines run VRL functions only.
Learn more:
Related link:
Example functions
Enrich log data in OpenObserve using VRL functions and CSV enrichment tables, with hands-on examples for protocol lookups and MaxMind GeoIP location data.
Functions in OpenObserve
Define and apply VRL functions in OpenObserve for enrichment, parsing, redaction, and more—at ingest or query time for efficient log transformation.