github.com/crowdsecurity/crowdsec@v1.6.1/pkg/parser/tests/whitelist-base/base-grok.yaml (about)

     1  name: test/whitelists
     2  description: "Whitelist tests"
     3  debug: true
     4  whitelist:
     5    reason: "Whitelist tests"
     6    ip: 
     7      - 1.1.1.1
     8    cidr:
     9      - "1.2.3.0/24"
    10    expression:
    11      - "'supertoken1234' == evt.Enriched.test_token"
    12  statics:
    13    - meta: statics
    14      value: success