github.com/crowdsecurity/crowdsec@v1.6.1/pkg/parser/tests/multi-stage-grok/base-grok-s00.yaml (about) 1 filter: "evt.Line.Labels.type == 'testlog'" 2 debug: true 3 onsuccess: next_stage 4 name: tests/base-grok 5 nodes: 6 - grok: 7 pattern: ^xxheader %{GREEDYDATA:extracted_value} trailing stuff$ 8 apply_on: Line.Raw 9 statics: 10 - meta: log_type 11 value: parsed_testlog 12