Skip to content

Sends one UDP datagram per input event.

to_udp endpoint:string, [message=string|blob|record]

Sends one UDP datagram per input event to a fixed remote UDP endpoint.

The address of the remote endpoint. Must be of the format host:port. The optional udp:// prefix is accepted but not required.

An expression that is evaluated once per input event and must produce one of the following types:

  • string values are sent as UTF-8 bytes.
  • blob values are sent verbatim.
  • record values are serialized as compact JSON.
  • null values are skipped with a warning.

All other result types are ignored with a warning.

If you omit message, the operator sends the whole event as compact JSON.

Send a field as a UDP datagram:

from {message: "hello"}
to_udp "127.0.0.1:514", message=message

Send the full event as compact JSON:

from {service: "dns", status: "ok"}
to_udp "127.0.0.1:514"

Last updated: