{ "lines": [ { "Line": { "Labels": { "type": "testlog" }, "Raw": "xxheader VALUE1 trailing stuff" }, "MarshaledTime": "2020-01-01T10:00:00+00:00", "Meta": { "source_ip": "1.2.3.4" } } ], "results": [ { "Alert": { "sources": { "1.2.3.4": { "scope": "Ip", "value": "1.2.3.4", "ip": "1.2.3.4" } }, "Alert" : { "scenario": "test/simple-trigger-reprocess", "events_count": 1 } } }, { "Alert": { "sources": { "1.2.3.4": { "scope": "Ip", "value": "1.2.3.4", "ip": "1.2.3.4" } }, "Alert" : { "scenario": "test/simple-postoverflow-scenario", "events_count": 1 } } } ] }