Sawmill is a JSON transformation Java library
Clone or download
oririechman Merge pull request #164 from logzio/DEV-10494-use-mvn-central-uap
DEV-10494: use maven central ua parser and remove twitter mvn repo
Latest commit 8b4c72f Oct 11, 2018

Sawmill Logo

Build Status Maven Central

Sawmill is a JSON transformation open source library.

It enables you to enrich, transform, and filter your JSON documents.

Using Sawmill pipelines you can integrate your favorite groks, geoip, user-agent resolving, add or remove fields/tags and more in a descriptive manner, using configuration files or builders, in a simple DSL, allowing you to dynamically change transformations.


Get Sawmill Java via Maven:


or Gradle:

compile 'io.logz.sawmill:sawmill-core:1.1.46'


The full Sawmill documentation can be found here.

Simple configuration example

  "steps": [
      "grok": {
        "config": {
          "field": "message",
          "overwrite": [
          "patterns": [
            "(%{IPORHOST:client_ip}|-) %{USER:ident} %{USER:auth} \\[%{HTTPDATE:timestamp}\\] \\\"(?:%{WORD:verb} %{NOTSPACE:request}(?: HTTP/%{NUMBER:httpversion:float})?|%{DATA:rawrequest})\\\" %{NUMBER:response:int} (?:%{NUMBER:bytes:float}|-) B %{DATA:thread} %{NUMBER:response_time:float} ms %{DATA:servername} %{DATA:client_id:int}(\\;%{NOTSPACE})? %{DATA:device_id} %{DATA}"
      "removeField": {
        "config": {
          "path": "message"