crowdsec/pkg/parser/tests/dateparser-enrich/base-grok.yaml
Thibault bui Koechlin 2016167654 initial import
2020-05-15 11:39:16 +02:00

11 lines
207 B
YAML

filter: "evt.StrTime != ''"
name: test/dateparse
debug: true
#it's a hack lol
statics:
- method: ParseDate
expression: evt.StrTime
- target: MarshaledTime
expression: evt.Enriched.MarshaledTime