crowdsec/pkg/parser/tests/base-grok-external-data/test.yaml
2020-05-28 11:28:49 +02:00

33 lines
763 B
YAML

#these are the events we input into parser
lines:
- Line:
Labels:
#this one will be checked by a filter
type: testlog
Raw: xxheader VALUE1 trailing stuff
- Line:
#see tricky case : first one is nginx via syslog, the second one is local nginx :)
Labels:
#this one will be checked by a filter
type: testlog
Raw: xxheader VALUE2 trailing stuff
#these are the results we expect from the parser
results:
- Meta:
log_type: parsed_testlog
is_it_in_file: true
Parsed:
extracted_value: VALUE1
Process: true
Stage: s00-raw
- Meta:
log_type: parsed_testlog
is_it_in_file: false
Parsed:
extracted_value: VALUE2
Process: true
Stage: s00-raw