195 lines
3.9 KiB
JSON
195 lines
3.9 KiB
JSON
|
{
|
||
|
"lines": [
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE1 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:00+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.4",
|
||
|
"uniq_key": "aaa"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:01+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.4",
|
||
|
"uniq_key": "aab"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:01+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.4",
|
||
|
"uniq_key": "aac"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:02+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.4",
|
||
|
"uniq_key": "aaa"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:02+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.4",
|
||
|
"uniq_key": "aaa"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:03+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.4",
|
||
|
"uniq_key": "aab"
|
||
|
}
|
||
|
},
|
||
|
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:03+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.5",
|
||
|
"uniq_key": "aaa"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:04+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.5",
|
||
|
"uniq_key": "aab"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:04+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.5",
|
||
|
"uniq_key": "aac"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:05+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.5",
|
||
|
"uniq_key": "aaa"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:05+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.5",
|
||
|
"uniq_key": "aab"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:06+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.5",
|
||
|
"uniq_key": "aac"
|
||
|
}
|
||
|
},
|
||
|
{
|
||
|
"Line": {
|
||
|
"Labels": {
|
||
|
"type": "testlog"
|
||
|
},
|
||
|
"Raw": "xxheader VALUE2 trailing stuff"
|
||
|
},
|
||
|
"MarshaledTime": "2020-01-01T10:00:06+00:00",
|
||
|
"Meta": {
|
||
|
"source_ip": "1.2.3.5",
|
||
|
"uniq_key": "aad"
|
||
|
}
|
||
|
}
|
||
|
],
|
||
|
"results": [
|
||
|
{
|
||
|
"Alert": {
|
||
|
"sources": {
|
||
|
"1.2.3.5": {
|
||
|
"scope": "Ip",
|
||
|
"value": "1.2.3.5",
|
||
|
|
||
|
"ip": "1.2.3.5"
|
||
|
}
|
||
|
},
|
||
|
"Alert" : {
|
||
|
"scenario": "test/simple-leaky",
|
||
|
"events_count": 4
|
||
|
}
|
||
|
|
||
|
}
|
||
|
}
|
||
|
]
|
||
|
}
|
||
|
|