From da016343c0587e921e5daa37367aeef3f4142e9a Mon Sep 17 00:00:00 2001
From: il <il@ilnmors.internal>
Date: Sun, 12 Apr 2026 14:09:44 +0900
Subject: [PATCH] feat(alloy): add json parser to categorize log level

---
 config/services/systemd/common/alloy/config.alloy.j2 | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/config/services/systemd/common/alloy/config.alloy.j2 b/config/services/systemd/common/alloy/config.alloy.j2
index 3f9edf8..aac0cc7 100644
--- a/config/services/systemd/common/alloy/config.alloy.j2
+++ b/config/services/systemd/common/alloy/config.alloy.j2
@@ -204,6 +204,11 @@ loki.process "journal_parser" {
         forward_to = [loki.write.loki.receiver]
         // Severity parsing
         // If content of log includes "level" information, change the level
+        stage.json {
+            expressions = {
+                "content_level" = "level",
+            }
+        }
         stage.logfmt {
             mapping = {
                 "content_level" = "level",