aws-cdk-lib/aws-logs/lib/transformer.d.ts

Version 2 of the AWS Cloud Development Kit library

/**
 * Generated TypeScript code for L2 Construct Design: AWS Logs Transformer
 *
 * This file contains TypeScript definitions for the AWS Logs Transformer L2 Construct.
 *
 * A log transformer enables transforming log events into a different format, making them easier
 * to process and analyze. You can also transform logs from different sources into standardized formats
 * that contain relevant, source-specific information.
 *
 * After you create a transformer, CloudWatch performs the transformations at the time of log ingestion.
 * You can then refer to the transformed versions of the logs during operations such as
 * querying with CloudWatch Logs Insights or creating metric filters or subscription filters.
 *
 * Resource Structure:
 * - AWS::Logs::Transformer: Interface (ITransformer) directly implemented by concrete classes (Transformer)
 *   This follows a direct implementation pattern where concrete classes implement the interface directly without a shared base class.
 */
import { Construct } from 'constructs';
import { ILogGroup } from './log-group';
import { Resource } from '../../core';
/**
 * Valid data types for type conversion in the TypeConverter processor.
 * Used to specify the target data type for field conversion.
 */
export declare enum TypeConverterType {
    /** Convert value to boolean type */
    BOOLEAN = "boolean",
    /** Convert value to integer type */
    INTEGER = "integer",
    /** Convert value to double (floating point) type */
    DOUBLE = "double",
    /** Convert value to string type */
    STRING = "string"
}
/**
 * Standard datetime formats for the DateTimeConverter processor.
 * Provides common format patterns for date/time conversion.
 */
export declare enum DateTimeFormat {
    /** ISO 8601 format (yyyy-MM-ddTHH:mm:ssZ) */
    ISO_8601 = "yyyy-MM-dd'T'HH:mm:ss'Z'",
    /** Unix timestamp (seconds since epoch) */
    UNIX_TIMESTAMP = "epoch",
    /** Custom format specified by the targetFormat parameter */
    CUSTOM = "custom"
}
/**
 * Valid delimiter characters for CSV processor.
 * Defines the character used to separate each column in CSV data.
 */
export declare enum DelimiterCharacter {
    /** Comma character */
    COMMA = ",",
    /** Tab character */
    TAB = "\t",
    /** Space character */
    SPACE = " ",
    /** Semicolon character */
    SEMICOLON = ";",
    /** Pipe character */
    PIPE = "|"
}
/**
 * Valid quote characters for CSV processor.
 * Defines the character used as a text qualifier for a single column of data.
 */
export declare enum QuoteCharacter {
    /** Double quote character (default) */
    DOUBLE_QUOTE = "\"",
    /** Single quote character */
    SINGLE_QUOTE = "'"
}
/**
 * Valid field delimiters for ParseKeyValue processor.
 * Defines the delimiter string used between key-value pairs in the original log events.
 */
export declare enum KeyValuePairDelimiter {
    /** Ampersand character (default) */
    AMPERSAND = "&",
    /** Semicolon character */
    SEMICOLON = ";",
    /** Space character */
    SPACE = " ",
    /** Newline character */
    NEWLINE = "\n"
}
/**
 * Valid key-value delimiters for ParseKeyValue processor.
 * Defines the delimiter string to use between the key and value in each pair.
 */
export declare enum KeyValueDelimiter {
    /** Equal sign (default) */
    EQUAL = "=",
    /** Colon character */
    COLON = ":"
}
/**
 * Types of event sources supported to convert to OCSF format.
 */
export declare enum OCSFSourceType {
    /** Log events from CloudTrail */
    CLOUD_TRAIL = "CloudTrail",
    /** Log events from Route53Resolver */
    ROUTE53_RESOLVER = "Route53Resolver",
    /** Log events from VPCFlow */
    VPC_FLOW = "VPCFlow",
    /** Log events from EKSAudit */
    EKS_AUDIT = "EKSAudit",
    /** Log events from AWSWAF */
    AWS_WAF = "AWSWAF"
}
/**
 * OCSF Schema versions supported by transformers.
 */
export declare enum OCSFVersion {
    /**
     * OCSF schema version 1.1.
     * @see https://schema.ocsf.io/1.1.0/
     */
    V1_1 = "V1.1"
}
/**
 * Types of configurable parser processors.
 * Defines the various parser types that can be used to process log events.
 */
export declare enum ParserProcessorType {
    /** Parse log entries as JSON */
    JSON = 0,
    /** Parse log entries as key-value pairs */
    KEY_VALUE = 1,
    /** Parse log entries in CSV format */
    CSV = 2,
    /** Parse log entries using Grok patterns */
    GROK = 3,
    /** Parse logs to OCSF format */
    OCSF = 4
}
/**
 * Types of AWS vended logs with built-in parsers.
 * AWS provides specialized parsers for common log formats produced by various AWS services.
 */
export declare enum VendedLogType {
    /** Parse CloudFront logs */
    CLOUDFRONT = 0,
    /** Parse VPC flow logs */
    VPC = 1,
    /** Parse AWS WAF logs */
    WAF = 2,
    /** Parse Route 53 logs */
    ROUTE53 = 3,
    /** Parse PostgreSQL logs */
    POSTGRES = 4
}
/**
 * Types of string mutation operations.
 * Defines various operations that can be performed to modify string values in log events.
 */
export declare enum StringMutatorType {
    /** Convert strings to lowercase */
    LOWER_CASE = 0,
    /** Convert strings to uppercase */
    UPPER_CASE = 1,
    /** Trim whitespace from strings */
    TRIM = 2,
    /** Split strings by delimiter */
    SPLIT = 3,
    /** Replace substrings in strings */
    SUBSTITUTE = 4
}
/**
 * Types of JSON mutation operations.
 * Defines operations that can be performed to modify the JSON structure of log events.
 */
export declare enum JsonMutatorType {
    /** Add new keys to the log event */
    ADD_KEYS = 0,
    /** Delete keys from the log event */
    DELETE_KEYS = 1,
    /** Move keys to different locations */
    MOVE_KEYS = 2,
    /** Rename keys in the log event */
    RENAME_KEYS = 3,
    /** Copy values between keys */
    COPY_VALUE = 4,
    /** Convert a list to a map */
    LIST_TO_MAP = 5
}
/**
 * Types of data conversion operations.
 * Defines operations that can convert data from one format to another.
 */
export declare enum DataConverterType {
    /** Convert data types */
    TYPE_CONVERTER = 0,
    /** Convert datetime formats */
    DATETIME_CONVERTER = 1
}
/**
 * Processor to parse events from CloudTrail, Route53Resolver, VPCFlow, EKSAudit and AWSWAF into OCSF V1.1 format.
 */
export interface ParseToOCSFProperty {
    /**
     * Path to the field in the log event that will be parsed. Use dot notation to access child fields.
     * @default '@message'
     */
    readonly source?: string;
    /**
     * Type of input log event source to convert to OCSF format.
     */
    readonly eventSource: OCSFSourceType;
    /**
     * Version of OCSF schema to convert to.
     */
    readonly ocsfVersion: OCSFVersion;
}
/**
 * This processor parses log events that are in JSON format. It can extract JSON key-value pairs and place them
 * under a destination that you specify.
 * Additionally, because you must have at least one parse-type processor in a transformer, you can use ParseJSON as that
 * processor for JSON-format logs, so that you can also apply other processors, such as mutate processors, to these logs.
 * For more information about this processor including examples, see parseJSON in the CloudWatch Logs User Guide.
 */
export interface ParseJSONProperty {
    /**
     * Path to the field in the log event that will be parsed. Use dot notation to access child fields.
     * @default '@message'
     */
    readonly source?: string;
    /**
     * The location to put the parsed key value pair into.
     * @default - Placed under root of log event
     */
    readonly destination?: string;
}
/**
 * This processor parses a specified field in the original log event into key-value pairs.
 * For more information about this processor including examples, see parseKeyValue in the CloudWatch Logs User Guide.
 */
export interface ParseKeyValueProperty {
    /**
     * Path to the field in the log event that will be parsed. Use dot notation to access child fields.
     * @default '@message'
     */
    readonly source?: string;
    /**
     * The destination field to put the extracted key-value pairs into.
     * @default - Places at the root of the JSON input.
     */
    readonly destination?: string;
    /**
     * The field delimiter string that is used between key-value pairs in the original log events.
     * @default KeyValuePairDelimiter.AMPERSAND
     */
    readonly fieldDelimiter?: KeyValuePairDelimiter;
    /**
     * The delimiter string to use between the key and value in each pair in the transformed log event.
     * @default KeyValueDelimiter.EQUAL
     */
    readonly keyValueDelimiter?: KeyValueDelimiter;
    /**
     * If you want to add a prefix to all transformed keys, specify it here.
     * @default - No prefix is added to the keys.
     */
    readonly keyPrefix?: string;
    /**
     * A value to insert into the value field in the result, when a key-value pair is not successfully split.
     * @default - No values is inserted when split is not successful.
     */
    readonly nonMatchValue?: string;
    /**
     * Specifies whether to overwrite the value if the destination key already exists.
     * @default false
     */
    readonly overwriteIfExists?: boolean;
}
/**
 * Copy Value processor, copies values from source to target for each entry.
 */
export interface CopyValueProperty {
    /**
     * List of sources and target to copy.
     */
    readonly entries: Array<CopyValueEntryProperty>;
}
/**
 * The CSV processor parses comma-separated values (CSV) from the log events into columns.
 * For more information about this processor including examples, see csv in the CloudWatch Logs User Guide.
 */
export interface CsvProperty {
    /**
     * Character used as a text qualifier for a single column of data.
     * @default QuoteCharacter.DOUBLE_QUOTE
     */
    readonly quoteCharacter?: QuoteCharacter;
    /**
     * Character used to separate each column in the original comma-separated value log event.
     * @default DelimiterCharacter.COMMA
     */
    readonly delimiter?: DelimiterCharacter;
    /**
     * The path to the field in the log event that has the comma separated values to be parsed.
     * @default '@message'
     */
    readonly source?: string;
    /**
     * An array of names to use for the columns in the transformed log event.
     * @default - Column names ([column_1, column_2 ...]) are used
     */
    readonly columns?: Array<string>;
}
/**
 * This processor converts a datetime string into a format that you specify.
 * For more information about this processor including examples, see datetimeConverter in the CloudWatch Logs User Guide.
 */
export interface DateTimeConverterProperty {
    /**
     * The key to apply the date conversion to.
     */
    readonly source: string;
    /**
     * The JSON field to store the result in.
     */
    readonly target: string;
    /**
     * The datetime format to use for the converted data in the target field.
     * @default "yyyy-MM-dd'T'HH:mm:ss.SSS'Z'"
     */
    readonly targetFormat?: string;
    /**
     * A list of patterns to match against the source field.
     */
    readonly matchPatterns: Array<string>;
    /**
     * The time zone of the source field.
     * @default UTC
     */
    readonly sourceTimezone?: string;
    /**
     * The time zone of the target field.
     * @default UTC
     */
    readonly targetTimezone?: string;
    /**
     * The locale of the source field.
     */
    readonly locale: string;
}
/**
 * This processor uses pattern matching to parse and structure unstructured data. This processor can also extract fields from log messages.
 * For more information about this processor including examples, see grok in the CloudWatch Logs User Guide.
 */
export interface GrokProperty {
    /**
     * The path to the field in the log event that you want to parse.
     * @default '@message'
     */
    readonly source?: string;
    /**
     * The grok pattern to match against the log event. For a list of supported grok patterns,
     * see Supported grok patterns in the CloudWatch Logs User Guide.
     */
    readonly match: string;
}
/**
 * This processor takes a list of objects that contain key fields, and converts them into a map of target keys.
 * For more information about this processor including examples, see listToMap in the CloudWatch Logs User Guide.
 */
export interface ListToMapProperty {
    /**
     * The key in the log event that has a list of objects that will be converted to a map.
     */
    readonly source: string;
    /**
     * The key of the field to be extracted as keys in the generated map.
     */
    readonly key: string;
    /**
     * If this is specified, the values that you specify in this parameter will be extracted from the source objects
     * and put into the values of the generated map.
     * @default - Original objects in the source list will be put into the values of the generated map
     */
    readonly valueKey?: string;
    /**
     * The key of the field that will hold the generated map.
     * @default - Stored at the root of the log event
     */
    readonly target?: string;
    /**
     * A Boolean value to indicate whether the list will be flattened into single items.
     * @default false
     */
    readonly flatten?: boolean;
    /**
     * If you set flatten to true, use flattenedElement to specify which element, first or last, to keep.
     * You must specify this parameter if flatten is true.
     * @default - Must be specified if flatten is true and if flatten is false, has no effect
     */
    readonly flattenedElement?: string;
}
/**
 * This processor adds new key-value pairs to the log event.
 * For more information about this processor including examples, see addKeys in the CloudWatch Logs User Guide.
 */
export interface AddKeysProperty {
    /**
     * An array of objects, where each object contains information about one key to add to the log event.
     */
    readonly entries: Array<AddKeyEntryProperty>;
}
/**
 * This processor adds new key-value pairs to the log event.
 * For more information about this processor including examples, see addKeys in the CloudWatch Logs User Guide.
 */
export interface ProcessorDeleteKeysProperty {
    /**
     * A list of keys to delete
     */
    readonly withKeys: Array<String>;
}
/**
 * This processor copies values within a log event.
 * You can also use this processor to add metadata to log events by copying values from metadata keys.
 * For more information about this processor including examples, see copyValue in the CloudWatch Logs User Guide.
 */
export interface CopyValueProperty {
    /**
     * An array of CopyValueEntry objects, where each object contains information about one field value to copy.
     */
    readonly entries: Array<CopyValueEntryProperty>;
}
/**
 * This processor moves a key from one field to another. The original key is deleted.
 * For more information about this processor including examples, see moveKeys in the CloudWatch Logs User Guide.
 */
export interface MoveKeysProperty {
    /**
     * An array of objects, where each object contains information about one key to move.
     */
    readonly entries: Array<MoveKeyEntryProperty>;
}
/**
 * Use this processor to rename keys in a log event.
 * For more information about this processor including examples, see renameKeys in the CloudWatch Logs User Guide.
 */
export interface RenameKeysProperty {
    /**
     * An array of RenameKeyEntry objects, where each object contains information about one key to rename.
     */
    readonly entries: Array<RenameKeyEntryProperty>;
}
/**
 * Use this processor to split a field into an array of strings using a delimiting character.
 * For more information about this processor including examples, see splitString in the CloudWatch Logs User Guide.
 */
export interface SplitStringProperty {
    /**
     * An array of SplitStringEntry objects, where each object contains information about one field to split.
     */
    readonly entries: Array<SplitStringEntryProperty>;
}
/**
 * This processor matches a key's value against a regular expression and replaces all matches with a replacement string.
 * For more information about this processor including examples, see substituteString in the CloudWatch Logs User Guide.
 */
export interface SubstituteStringProperty {
    /**
     * An array of objects, where each object contains information about one key to match and replace.
     */
    readonly entries: Array<SubstituteStringEntryProperty>;
}
/**
 * Use this processor to convert a value type associated with the specified key to the specified type.
 * It's a casting processor that changes the types of the specified fields.
 * For more information about this processor including examples, see typeConverter in the CloudWatch Logs User Guide.
 */
export interface TypeConverterProperty {
    /**
     * An array of TypeConverterEntry objects, where each object contains information about one field to change the type of.
     */
    readonly entries: Array<TypeConverterEntryProperty>;
}
/**
 * Interface representing a single processor in a CloudWatch Logs transformer.
 * A log transformer is a series of processors, where each processor applies one type of transformation
 * to the log events. The processors work one after another, in the order that they are listed, like a pipeline.
 */
export interface IProcessor {
    /**
     * Returns the L1 processor configuration
     * @internal
     */
    _render(): any;
}
/** Base properties for all processor types */
export interface BaseProcessorProps {
}
/** Properties for creating configurable parser processors */
export interface ParserProcessorProps extends BaseProcessorProps {
    /** The type of parser processor */
    readonly type: ParserProcessorType;
    /**
     * Options for JSON parser. Required when type is JSON.
     * @default - No JSON parser is created if props not set
     */
    readonly jsonOptions?: ParseJSONProperty;
    /**
     * Options for key-value parser. Required when type is KEY_VALUE.
     * @default - No key-value parser is created if props not set
     */
    readonly keyValueOptions?: ParseKeyValueProperty;
    /**
     * Options for CSV parser. Required when type is CSV.
     * @default - No CSV parser is created if props not set
     */
    readonly csvOptions?: CsvProperty;
    /**
     * Options for Grok parser. Required when type is GROK.
     * @default - No Grok parser is created if props not set
     */
    readonly grokOptions?: GrokProperty;
    /**
     * Options for ParseToOCSF parser. Required when type is set to OCSF
     * @default - no OCSF parser is created.
     */
    readonly parseToOCSFOptions?: ParseToOCSFProperty;
}
/** Properties for creating AWS vended log parsers */
export interface VendedLogParserProps extends BaseProcessorProps {
    /** The type of AWS vended log to parse */
    readonly logType: VendedLogType;
    /**
     * Source field to parse.
     * @default @message
     */
    readonly source?: string;
}
/** Properties for creating string mutator processors */
export interface StringMutatorProps extends BaseProcessorProps {
    /** The type of string mutation operation */
    readonly type: StringMutatorType;
    /**
     * Keys for strings to convert to lowercase. Required when type is LOWER_CASE.
     * @default - No lowercase processor is created if props not set
     */
    readonly lowerCaseKeys?: Array<string>;
    /**
     * Keys for strings to convert to uppercase. Required when type is UPPER_CASE.
     * @default - No uppercase processor is created if props not set
     */
    readonly upperCaseKeys?: Array<string>;
    /**
     * Keys for strings to trim. Required when type is TRIM.
     * @default - No trim processor is created if props not set
     */
    readonly trimKeys?: Array<string>;
    /**
     * Options for string splitting. Required when type is SPLIT.
     * @default - No string splitting processor is created if props not set
     */
    readonly splitOptions?: SplitStringProperty;
    /**
     * Options for string substitution. Required when type is SUBSTITUTE.
     * @default - No string substitution processor is created if props not set
     */
    readonly substituteOptions?: SubstituteStringProperty;
}
/** Properties for creating JSON mutator processors */
export interface JsonMutatorProps extends BaseProcessorProps {
    /** The type of JSON mutation operation */
    readonly type: JsonMutatorType;
    /**
     * Options for adding keys. Required when type is ADD_KEYS.
     * @default - No adding keys processor is created if props not set
     */
    readonly addKeysOptions?: AddKeysProperty;
    /**
     * Keys to delete. Required when type is DELETE_KEYS.
     * @default - No delete key processor is created if props not set
     */
    readonly deleteKeysOptions?: ProcessorDeleteKeysProperty;
    /**
     * Options for moving keys. Required when type is MOVE_KEYS.
     * @default - No move key processor is created if props not set
     */
    readonly moveKeysOptions?: MoveKeysProperty;
    /**
     * Options for renaming keys. Required when type is RENAME_KEYS.
     * @default - No rename key processor is created if props not set
     */
    readonly renameKeysOptions?: RenameKeysProperty;
    /**
     * Options for copying values. Required when type is COPY_VALUE.
     * @default - No copy value processor is created if props not set
     */
    readonly copyValueOptions?: CopyValueProperty;
    /**
     * Options for converting lists to maps. Required when type is LIST_TO_MAP.
     * @default - No list-to-map processor is created if props not set
     */
    readonly listToMapOptions?: ListToMapProperty;
}
/** Properties for creating data converter processors */
export interface DataConverterProps extends BaseProcessorProps {
    /** The type of data conversion operation */
    readonly type: DataConverterType;
    /**
     * Options for type conversion. Required when type is TYPE_CONVERTER.
     * @default - No type convertor processor is created if not set
     */
    readonly typeConverterOptions?: TypeConverterProperty;
    /**
     * Options for datetime conversion. Required when type is DATETIME_CONVERTER.
     * @default - No date time converter processor is created if not set
     */
    readonly dateTimeConverterOptions?: DateTimeConverterProperty;
}
/**
 * This object defines one key that will be added with the addKeys processor.
 */
export interface AddKeyEntryProperty {
    /**
     * The key of the new entry to be added to the log event.
     */
    readonly key: string;
    /**
     * The value of the new entry to be added to the log event.
     */
    readonly value: string;
    /**
     * Specifies whether to overwrite the value if the key already exists.
     * @default false
     */
    readonly overwriteIfExists?: boolean;
}
/**
 * This object defines one value to be copied with the copyValue processor.
 */
export interface CopyValueEntryProperty {
    /**
     * The key to copy.
     */
    readonly source: string;
    /**
     * The key of the field to copy the value to.
     */
    readonly target: string;
    /**
     * Specifies whether to overwrite the value if the target key already exists.
     * @default false
     */
    readonly overwriteIfExists?: boolean;
}
/**
 * This object defines one key that will be moved with the moveKey processor.
 */
export interface MoveKeyEntryProperty {
    /**
     * The key to move.
     */
    readonly source: string;
    /**
     * The key to move to.
     */
    readonly target: string;
    /**
     * Specifies whether to overwrite the value if the target key already exists.
     * @default false
     */
    readonly overwriteIfExists?: boolean;
}
/**
 * This object defines one key that will be renamed with the renameKey processor.
 */
export interface RenameKeyEntryProperty {
    /**
     * The key to rename.
     */
    readonly key: string;
    /**
     * The string to use for the new key name.
     */
    readonly renameTo: string;
    /**
     * Whether to overwrite the target key if it already exists.
     * @default false
     */
    readonly overwriteIfExists?: boolean;
}
/**
 * This object defines one log field that will be split with the splitString processor.
 */
export interface SplitStringEntryProperty {
    /**
     * The key of the field to split.
     */
    readonly source: string;
    /** The separator character to split the string on */
    readonly delimiter: DelimiterCharacter;
}
/**
 * This object defines one log field key that will be replaced using the substituteString processor.
 */
export interface SubstituteStringEntryProperty {
    /**
     * The key to modify.
     */
    readonly source: string;
    /**
     * The regular expression string to be replaced.
     */
    readonly from: string;
    /**
     * The string to be substituted for each match of from.
     */
    readonly to: string;
}
/**
 * This object defines one value type that will be converted using the typeConverter processor.
 */
export interface TypeConverterEntryProperty {
    /**
     * The key with the value that is to be converted to a different type.
     */
    readonly key: string;
    /** The data type to convert the field value to. */
    readonly type: TypeConverterType;
}
/**
 * The Resource properties for AWS::Logs::Transformer resource. This
 * interface defines all configuration options for the CfnTransformer construct.
 */
export interface TransformerProps {
    /**
     * Name of the transformer.
     */
    readonly transformerName: string;
    /** Existing log group that you want to associate with this transformer. */
    readonly logGroup: ILogGroup;
    /** List of processors in a transformer */
    readonly transformerConfig: Array<IProcessor>;
}
/** Parser processor for common data formats */
export declare class ParserProcessor implements IProcessor {
    /** The type of parser */
    type: ParserProcessorType;
    /** Options for JSON parser */
    private jsonOptions?;
    /** Options for key-value parser */
    private keyValueOptions?;
    /** Options for CSV parser */
    private csvOptions?;
    /** Options for Grok parser */
    private grokOptions?;
    /** Options for OCSF parser */
    private parseToOCSFOptions?;
    /** Creates a new parser processor */
    constructor(props: ParserProcessorProps);
    /**
     * Returns the L1 processor configuration for this parser
     * @internal
     */
    _render(): any;
}
/** Parser processor for AWS vended logs */
export declare class VendedLogParser implements IProcessor {
    /** The type of AWS vended log */
    logType: VendedLogType;
    /** Creates a new vended log parser processor */
    constructor(props: VendedLogParserProps);
    /**
     * Returns the L1 processor configuration for this vended log parser
     * @internal
     */
    _render(): any;
}
/** Processor for string mutation operations */
export declare class StringMutatorProcessor implements IProcessor {
    /** The type of string mutation operation */
    type: StringMutatorType;
    /** Keys for strings to convert to lowercase */
    private lowerCaseKeys?;
    /** Keys for strings to convert to uppercase */
    private upperCaseKeys?;
    /** Keys for strings to trim */
    private trimKeys?;
    /** Options for string splitting */
    private splitOptions?;
    /** Options for string substitution */
    private substituteOptions?;
    /** Creates a new string mutator processor */
    constructor(props: StringMutatorProps);
    /**
     * Returns the L1 processor configuration for this string mutator
     * @internal
     */
    _render(): any;
}
/** Processor for JSON mutation operations */
export declare class JsonMutatorProcessor implements IProcessor {
    /** The type of JSON mutation operation */
    type: JsonMutatorType;
    /** Options for adding keys */
    private addKeysOptions?;
    /** Keys to delete */
    private deleteKeysOptions?;
    /** Options for moving keys */
    private moveKeysOptions?;
    /** Options for renaming keys */
    private renameKeysOptions?;
    /** Options for copying values */
    private copyValueOptions?;
    /** Options for converting lists to maps */
    private listToMapOptions?;
    /** Creates a new JSON mutator processor */
    constructor(props: JsonMutatorProps);
    /**
     * Returns the L1 processor configuration for this JSON mutator
     * @internal
     */
    _render(): any;
}
/** Processor for data conversion operations */
export declare class DataConverterProcessor implements IProcessor {
    /** The type of data conversion operation */
    type: DataConverterType;
    /** Options for type conversion */
    private typeConverterOptions?;
    /** Options for datetime conversion */
    private dateTimeConverterOptions?;
    /** Creates a new data converter processor */
    constructor(props: DataConverterProps);
    /**
     * Returns the L1 processor configuration for this data converter
     * @internal
     */
    _render(): any;
}
/** Represent the L2 construct for the AWS::Logs::Transformer CloudFormation resource. */
export declare class Transformer extends Resource {
    /**
     * The property injection ID for this resource class.
     * Used by the CDK frameworks for managing resource lifecycle.
     */
    static readonly PROPERTY_INJECTION_ID: string;
    /** The Transformer L2 construct that represents AWS::Logs::Transformer CFN resource. */
    constructor(scope: Construct, id: string, props: TransformerProps);
    /**
     * @internal Validates that the number of processors doesn't exceed the AWS limit of 20 per transformer, and that at least
     * one processor is provided.
     */
    private validateProcessorCount;
    /**
     * @internal Validates parser processor requirements: at least one parser-type processor is required, maximum of 5
     * parser-type processors allowed, and if including a vended log parser, it must be the first processor.
     */
    private validateParserProcessors;
    /**
     * @internal Validates that certain processor types appear at most once: only one grok processor, one addKeys processor,
     * and one copyValue processor allowed.
     */
    private validateUniqueProcessorTypes;
    /**
     * @internal Validates that the log group is in the Standard log class, as transformers can only be used with Standard log
     * groups.
     */
    private validateLogGroupClass;
}