crowdsec/pkg/parser/tests/dateparser-enrich/base-grok.yaml

11 lines
207 B
YAML
Raw Normal View History

2020-05-15 09:39:16 +00:00
filter: "evt.StrTime != ''"
name: test/dateparse
debug: true
#it's a hack lol
statics:
- method: ParseDate
expression: evt.StrTime
- target: MarshaledTime
expression: evt.Enriched.MarshaledTime