10 lines
178 B
YAML
10 lines
178 B
YAML
type: trigger
|
|
debug: true
|
|
name: test/simple-trigger
|
|
description: "Simple leaky"
|
|
filter: "evt.Line.Labels.type =='testlog'"
|
|
groupby: evt.Meta.source_ip
|
|
labels:
|
|
type: overflow_1
|
|
|