signal_type accepts logs, metrics, or traces. Creating a
pipeline requires pipelines.create; later edits, pause/resume, backfill, and deletion use the
corresponding pipelines.* permissions.curl -X POST http://localhost:5080/api/v1/scheduled_pipelines \
-H "authorization: Bearer $MS_JWT" \
-H 'content-type: application/json' \
-d '{
"name": "normalize-app",
"source_stream": "app_raw",
"target_stream": "app",
"function_steps": {
"language": "vrl",
"signal_type": "logs",
"steps": [
{
"transform_name": "normalize-level",
"script": ".level = downcase!(string!(.level))"
}
]
},
"cron": "every:5m",
"lookback_secs": 300,
"enabled": true
}'
Intake
Create a pipeline
Create a scheduled source-transform-sink pipeline.
curl -X POST http://localhost:5080/api/v1/scheduled_pipelines \
-H "authorization: Bearer $MS_JWT" \
-H 'content-type: application/json' \
-d '{
"name": "normalize-app",
"source_stream": "app_raw",
"target_stream": "app",
"function_steps": {
"language": "vrl",
"signal_type": "logs",
"steps": [
{
"transform_name": "normalize-level",
"script": ".level = downcase!(string!(.level))"
}
]
},
"cron": "every:5m",
"lookback_secs": 300,
"enabled": true
}'
Last modified on August 9, 2026
Was this page helpful?