How to split value in telemetry


I am looking for syntax that can help to split and take a part of string in logentry. For example current logentry looks like this -

kind: logentry
name: accesslog
namespace: istio-system
severity: ‘“Info”’
timestamp: request.time
clusterName: ‘"{{ }}"’
sourceIp: source.ip | ip(“”)
sourcePrincipal: source.principal | “Not_Found”
monitored_resource_type: ‘“UNSPECIFIED”’

Value of “source.principal” is I was looking to get only part of the value. Any help is appreciated :slight_smile:

Please share suggestions here

There is very limited support for string regex parsing in the expression language right now, but it is easy to improve upon, if we know what is needed.

Thank you. Will take a look.