type: counter
name: test/simple-trigger
description: "Simple leaky"
filter: "evt.Line.Labels.type =='testlog'"
duration: 1s
overflow_filter: any(queue.Queue, {.Meta.source_ip != '1.2.3.4'} )
capacity: -1
groupby: evt.Meta.source_ip
labels:
 type: overflow_1