crowdsec/pkg/parser/tests/multi-stage-grok/base-grok-s01.yaml

12 lines
265 B
YAML
Raw Normal View History

2020-05-15 09:39:16 +00:00
#only one of the events is going to throu filter
filter: "evt.Parsed.extracted_value == 'VALUE1'"
debug: true
onsuccess: next_stage
name: tests/second-stage-grok
statics:
- meta: did_second_stage
value: yes
- target: evt.Parsed.test_bis
value: lolilol