filter: "evt.Line.Labels.type == 'testlog'"
debug: true
onsuccess: next_stage
name: tests/base-grok
pattern_syntax:
  MYCAP2: ".*"
grok:
  pattern: ^xxheader %{MYCAP2:extracted_value} trailing stuff$
  apply_on: Line.Raw
statics:
  - meta: log_type
    value: parsed_testlog