2025-06-03T08:16:37.616017Z ERROR transform{component_kind="transform" component_id=output_logging_abc_parse_encoding component_type=remap}: vector::internal_events::remap: Internal log [Mapping failed with event.] has been suppressed 23 times.

2025-06-03T08:16:37.616031Z ERROR transform{component_kind="transform" component_id=output_logging_abc_parse_encoding component_type=remap}: vector::internal_events::remap: Mapping failed with event. error="function call error for \"join\" at (352:442): all array items must be strings" error_type="conversion_failed" stage="processing" internal_log_rate_limit=true

apiVersion: observability.openshift.io/v1
kind: ClusterLogForwarder
metadata:
  name: abc-logging
  namespace: openshift-logging
spec:
  filters:
    - name: filtera
      prune:
        notIn:
          - .message
          - .log_source
          - .log_type
      type: prune
  inputs:
    - application:
        selector:
          matchExpressions:
            - key: mykey
              operator: In
              values:
                - podnamea
                - podnameb
                - podnamec
      name: abclogs
      type: application
  managementState: Managed
  outputs:
    - name: logging-abc
      syslog:
        rfc: RFC5424
        url: 'udp://192.168.0.64:514'
      type: syslog
  pipelines:
    - filterRefs:
        - filtera
      inputRefs:
        - application
        - infrastructure
      name: syslogs-to-abc
      outputRefs:
        - logging-abc
  serviceAccount:
    name: collector