crowdsec/pkg/parser/tests/base-grok-no-subnode/test.yaml

30 lines
703 B
YAML
Raw Permalink Normal View History

2020-05-15 09:39:16 +00:00
#these are the events we input into parser
lines:
- Line:
Labels:
#this one will be checked by a filter
type: testlog
Raw: xxheader VALUE1 trailing stuff
- Line:
#see tricky case : first one is nginx via syslog, the second one is local nginx :)
Labels:
#this one will be checked by a filter
type: testlog
Raw: xxheader VALUE2 trailing stuff
#these are the results we expect from the parser
results:
- Meta:
log_type: parsed_testlog
Parsed:
extracted_value: VALUE1
Process: true
Stage: s00-raw
- Meta:
log_type: parsed_testlog
Parsed:
extracted_value: VALUE2
Process: true
Stage: s00-raw