github.com/crowdsecurity/crowdsec@v1.6.1/pkg/parser/tests/base-grok/test.yaml (about)

     1  #these are the events we input into parser
     2  lines:
     3    - Line:
     4        Labels:
     5          #this one will be checked by a filter
     6          type: testlog
     7        Raw: xxheader VALUE1 trailing stuff
     8    - Line:
     9    #see tricky case : first one is nginx via syslog, the second one is local nginx :)
    10        Labels:
    11          #this one will be checked by a filter
    12          type: testlog
    13        Raw: xxheader VALUE2 trailing stuff
    14  #these are the results we expect from the parser
    15  results:
    16  
    17    - Meta:
    18        log_type: parsed_testlog
    19      Parsed:
    20        extracted_value: VALUE1
    21      Process: true
    22      Stage: s00-raw
    23    - Meta:
    24        log_type: parsed_testlog
    25      Parsed:
    26        extracted_value: VALUE2
    27      Process: true
    28      Stage: s00-raw
    29