github.com/crowdsecurity/crowdsec@v1.6.1/pkg/parser/tests/base-grok-import/base-grok.yaml (about)

     1  filter: "evt.Line.Labels.type == 'testlog'"
     2  debug: true
     3  onsuccess: next_stage
     4  name: tests/base-grok
     5  nodes:
     6    - grok:
     7      #USERNAME is a pattern defined by the grokky library we are using
     8        name: SYSLOGFACILITY
     9        apply_on: Line.Raw
    10        statics:
    11          - enriched: subgrok_static_why_is_it_still_here
    12            value: because
    13  statics:
    14    - meta: log_type
    15      value: parsed_testlog
    16