github.com/crowdsecurity/crowdsec@v1.6.1/pkg/leakybucket/tests/overflow-with-meta/test.json (about)

     1  {
     2      "lines": [
     3         {
     4            "Line": {
     5               "Labels": {
     6                  "type": "testlog"
     7               },
     8               "Raw": "xxheader VALUE1 trailing stuff"
     9            },
    10            "MarshaledTime": "2020-01-01T10:00:00.000Z",
    11            "Meta": {
    12               "source_ip": "1.2.3.4",
    13               "uniq_key": "aaa"
    14            },
    15            "Enriched": {
    16               "ASNumber": "1234",
    17               "IsoCode": "FR",
    18               "ASNOrg": "random AS"
    19            }
    20         },
    21         {
    22            "Line": {
    23               "Labels": {
    24                  "type": "testlog"
    25               },
    26               "Raw": "xxheader VALUE1 trailing stuff"
    27            },
    28            "MarshaledTime": "2020-01-01T10:00:00.000Z",
    29            "Meta": {
    30               "source_ip": "1.2.3.4",
    31               "uniq_key": "aaa"
    32            },
    33            "Enriched": {
    34               "ASNumber": "1234",
    35               "IsoCode": "FR",
    36               "ASNOrg": "random AS"
    37            }
    38         }
    39        ],
    40        "results" : [
    41           {
    42              "Alert": {
    43                 "Sources": {
    44                    "1.2.3.4": {
    45                       "as_name": "random AS",
    46                       "as_number": "1234",
    47                       "cn": "FR",
    48                       "ip": "1.2.3.4",
    49                       "scope": "Ip",
    50                       "value": "1.2.3.4"
    51                    }
    52                 },            
    53                 "Alert" : {
    54                    "events_count": 1,
    55                    "scenario": "test/simple-trigger"
    56                 }
    57              }
    58           },
    59           {
    60              "Alert": {
    61                 "Sources": {
    62                    "1.2.3.4": {
    63                       "as_name": "random AS",
    64                       "as_number": "1234",
    65                       "cn": "FR",
    66                       "ip": "1.2.3.4",
    67                       "scope": "Ip",
    68                       "value": "1.2.3.4"
    69                    }
    70                 },            
    71                 "Alert" : {
    72                    "events_count": 1,
    73                    "scenario": "test/simple-trigger"
    74                 }
    75              }
    76              
    77           }
    78        ]
    79   }