mirror of
https://github.com/crowdsecurity/crowdsec.git
synced 2025-05-14 13:24:34 +02:00
13 lines
276 B
YAML
13 lines
276 B
YAML
filter: "evt.Line.Labels.type == 'testlog'"
|
|
debug: true
|
|
onsuccess: next_stage
|
|
name: tests/base-grok
|
|
pattern_syntax:
|
|
MYCAP2: ".*"
|
|
grok:
|
|
pattern: ^xxheader %{MYCAP2:extracted_value} trailing stuff$
|
|
apply_on: Line.Raw
|
|
statics:
|
|
- meta: log_type
|
|
value: parsed_testlog
|
|
|