# Using filters on loggin operator flows
**URL:** https://forums.suse.com/t/using-filters-on-loggin-operator-flows/20085
**Category:** SUSE Rancher Prime
**Created:** [April 17, 2021, 4:42pm UTC](https://forums.suse.com/t/using-filters-on-loggin-operator-flows/20085 "2021-04-17T16:42:02Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@WolfgangL](https://forums.suse.com/u/WolfgangL)
#### Post date: [April 17, 2021, 4:42pm UTC](https://forums.suse.com/t/using-filters-on-loggin-operator-flows/20085/1 "2021-04-17T16:42:02Z")
I´m trying to set up central logging with the new logging system in Rancher 2.5.7. I have defined a syslog output, that sends to my papertrail logging system. My problem is, that each line of log output fram a container is packed in a JSON-Object along wth lot´s of metadata, but I only want to see the original log entry from the container in my papertrail log for readability and log data size. Each event looks like
{
“log”: …
“stream”: …
“time”: …
…
}
but I only need the “log” key. So I tried to modify the data using filters on the flow for the container logs like:
```
filters:
- record_transformer:
keep_keys: log
```
but nothing changes in log output. I also tried other filters, but that doesn´t seem to take any effect on the log output.
---
### Author:  [@WolfgangL](https://forums.suse.com/u/WolfgangL)
#### Post date: [April 18, 2021, 1:44pm UTC](https://forums.suse.com/t/using-filters-on-loggin-operator-flows/20085/2 "2021-04-18T13:44:29Z")
in the meantime I found out, that using the “record\_modifier”-filter instead of “record\_transformer” is workling so it seems to be an issue with record\_transformer.