fix: move attributes.log to body field for filelog/monitored_pods

[joschi]

Refined log messages from Kubernetes pods/containers were only available in the log attribute but were never copied into the log record body.

This PR adds the necessary move operator to move the cleaned up log message from attributes.log to body.

The operator is also used in the recommended OpenTelemetry Collector configuration for Kubernetes:
https://github.com/open-telemetry/opentelemetry.io/blob/2024.09/content/en/docs/kubernetes/collector/components.md?plain=1#L328-L330

Refs open-telemetry/opentelemetry.io#3073

[mmanciop]

@joschi I remember this used to work, but it might be an oversight. Can you share a before/after?

[joschi]

Can you share a before/after?

@mmanciop Good that you've mentioned it I just found another discrepancy in the regular expressions for parser-crio and parser-containerd in the template. 😄

If you mean a before/after view of the produced logs:

Before:

{
  "resourceLogs": [
    {
      "schemaUrl": "https://opentelemetry.io/schemas/1.6.1",
      "scopeLogs": [
        {
          "logRecords": [
            {
              "attributes": [
                {
                  "key": "log",
                  "value": {
                    "stringValue": " Starting Foobar component ..."
                  }
                },
                {
                  "key": "log.file.path",
                  "value": {
                    "stringValue": "/var/log/pods/foobar-c6694c779-l42h8_6e8e8909-88ad-4cf9-bd45-9babedea17e9/foobar/0.log"
                  }
                },
                {
                  "key": "log.file.record_number",
                  "value": {
                    "intValue": "1"
                  }
                },
                {
                  "key": "log.iostream",
                  "value": {
                    "stringValue": "stdout"
                  }
                },
                {
                  "key": "logtag",
                  "value": {
                    "stringValue": "F"
                  }
                }
              ],
              "body": {
                "stringValue": "2024-10-30T13:15:51.659623514Z stdout F Starting Foobar component ..."
              },
              "observedTimeUnixNano": "1730294151744298369",
              "severityNumber": 0,
              "timeUnixNano": "1730294151659623514"
            }
          ]
        }
      ]
    }
  ]
}

After (also pay attention that the leading whitespace in the log message has been removed):

{
  "resourceLogs": [
    {
      "schemaUrl": "https://opentelemetry.io/schemas/1.6.1",
      "scopeLogs": [
        {
          "logRecords": [
            {
              "attributes": [
                {
                  "key": "log.file.path",
                  "value": {
                    "stringValue": "/var/log/pods/foobar-c6694c779-l42h8_6e8e8909-88ad-4cf9-bd45-9babedea17e9/foobar/0.log"
                  }
                },
                {
                  "key": "log.file.record_number",
                  "value": {
                    "intValue": "1"
                  }
                },
                {
                  "key": "log.iostream",
                  "value": {
                    "stringValue": "stdout"
                  }
                },
                {
                  "key": "logtag",
                  "value": {
                    "stringValue": "F"
                  }
                }
              ],
              "body": {
                "stringValue": "Starting Foobar component ..."
              },
              "observedTimeUnixNano": "1730294151744298369",
              "severityNumber": 0,
              "timeUnixNano": "1730294151659623514"
            }
          ]
        }
      ]
    }
  ]
}

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud