github.com/crowdsecurity/crowdsec@v1.6.1/pkg/leakybucket/tests/overflow-with-meta-and-information/test.json (about)

     1  {
     2      "lines": [
     3         {
     4            "Line": {
     5               "Labels": {
     6                  "type": "testlog"
     7               },
     8               "Raw": "xxheader VALUE1 trailing stuff"
     9            },
    10            "MarshaledTime": "2020-01-01T10:00:00.000Z",
    11            "Meta": {
    12               "source_ip": "1.2.3.4",
    13               "uniq_key": "aaa"
    14            },
    15            "Enriched": {
    16               "ASNumber": "1234",
    17               "IsoCode": "FR",
    18               "ASNOrg": "random AS"
    19            }
    20         },
    21         {
    22            "Line": {
    23               "Labels": {
    24                  "type": "testlog"
    25               },
    26               "Raw": "xxheader VALUE1 trailing stuff"
    27            },
    28            "MarshaledTime": "2020-01-01T10:00:00.000Z",
    29            "Meta": {
    30               "source_ip": "1.2.3.4",
    31               "uniq_key": "aaa"
    32            },
    33            "Enriched": {
    34               "ASNumber": "1234",
    35               "IsoCode": "FR",
    36               "ASNOrg": "random AS"
    37            }
    38         }
    39        ],
    40        "results" : [
    41           {
    42               "Alert": {
    43                 "Sources": {
    44                    "1.2.3.4": {
    45                       "as_name": "random AS",
    46                       "as_number": "1234",
    47                       "cn": "FR",
    48                       "ip": "1.2.3.4",
    49                       "scope": "Ip",
    50                       "value": "1.2.3.4"
    51                    }
    52                 },            
    53                 "Alert" : {
    54                    "events_count": 1,
    55                     "scenario": "test/simple-trigger",
    56                    "scenario_version": "1.0"
    57                 }
    58              }
    59           },
    60           {
    61              "Alert": {
    62                 "Sources": {
    63                    "1.2.3.4": {
    64                       "as_name": "random AS",
    65                       "as_number": "1234",
    66                       "cn": "FR",
    67                       "ip": "1.2.3.4",
    68                       "scope": "Ip",
    69                       "value": "1.2.3.4"
    70                    }
    71                 },            
    72                 "Alert" : {
    73                    "events_count": 1,
    74                    "scenario": "test/simple-trigger",
    75                    "scenario_version": "1.0"
    76                 }
    77              }
    78              
    79           }
    80        ]
    81   }