#these are the events we input into parser
lines:
  - Enriched:
      IpToResolve: 8.8.8.8
  - Enriched:
      IpToResolve: 1.2.3.4
#these are the results we expect from the parser
results:
  - Enriched:
      reverse_dns: dns.google.
      IpToResolve: 8.8.8.8
    Meta:
      did_dns_succeeded: yes
    Process: true
    Stage: s00-raw
  - Enriched:
      IpToResolve: 1.2.3.4
    Meta:
      did_dns_succeeded: no
    Process: true
    Stage: s00-raw