github.com/crowdsecurity/crowdsec@v1.6.1/pkg/parser/tests/base-tree/test.yaml (about)

     1  #these are the events we input into parser
     2  lines:
     3    - Line:
     4        Labels:
     5          #this one will be checked by a filter
     6          type: type1
     7        Raw: xxheader VALUE1 trailing stuff
     8    - Line:
     9    #see tricky case : first one is nginx via syslog, the second one is local nginx :)
    10        Labels:
    11          #this one will be checked by a filter
    12          type: type1
    13        Raw: xxheader VALUE2 trailing stuff
    14  #these are the results we expect from the parser
    15  results:
    16    - Meta:
    17        final_state: leaf1
    18        state_sub: VALUE1
    19      Parsed:
    20        extracted_value: VALUE1
    21      Process: true
    22      Stage: s00-raw
    23    - Meta:
    24        final_state: leaf2
    25        state_sub: VALUE2
    26      Parsed:
    27        extracted_value: VALUE2
    28      Process: true
    29      Stage: s00-raw
    30