{
  "lines": [
     {
        "Line": {
           "Labels": {
              "type": "testlog"
           },
           "Raw": "xxheader VALUE1 trailing stuff"
        },
        "MarshaledTime": "2020-01-01T10:00:00.000Z",
        "Meta": {
           "source_ip": "2a00:1450:4007:816::200e"
        }
     },
     {
        "Line": {
           "Labels": {
              "type": "testlog"
           },
           "Raw": "xxheader VALUE2 trailing stuff"
        },
        "MarshaledTime": "2020-01-01T10:00:05.000Z",
        "Meta": {
           "source_ip": "2a00:1450:4007:816::200e"
        }
     },
     {
        "Line": {
           "Labels": {
              "type": "testlog"
           },
           "Raw": "xxheader VALUE3 trailing stuff"
        },
        "MarshaledTime": "2020-01-01T10:00:05.000Z",
        "Meta": {
           "source_ip": "2a00:1450:4007:816::200e",
           "ratata" : "foobar2"
        }
     },
     {
        "Line": {
           "Labels": {
              "type": "testlog"
           },
           "Raw": "xxheader VALUE4 trailing stuff"
        },
        "MarshaledTime": "2020-01-01T10:00:05.000Z",
        "Meta": {
           "source_ip": "2a00:1450:4007:816::200e",
           "ratata" : "foobar0"
        }
     },
     {
        "Line": {
           "Labels": {
              "type": "testlog"
           },
           "Raw": "xxheader VALUE5 trailing stuff"
        },
        "MarshaledTime": "2020-01-01T10:00:05.000Z",
        "Meta": {
           "source_ip": "2a00:1450:4007:816::200e",
           "ratata" : "foobar1"
        }
     },
     {
        "Line": {
           "Labels": {
              "type": "testlog"
           },
           "Raw": "xxheader VALUE6 trailing stuff"
        },
        "MarshaledTime": "2020-01-01T10:00:05.000Z",
        "Meta": {
           "source_ip": "2a00:1450:4007:816::200e",
           "ratata" : "foobar"
        }
     }
  ],
  "results": [
    {
      "Type" : 1,
      "Alert": {
        "sources" : {
          "2a00:1450:4007:816::200e": {
            "ip": "2a00:1450:4007:816::200e",
            "scope": "Ip",
            "value": "2a00:1450:4007:816::200e"
          }
        },
        "Alert" : {
          "scenario": "test/simple-leaky",
          "events_count": 6
        }
      }
    }
  ]
}