106254f020
* cancel_on filter * tests
117 lines
2.2 KiB
JSON
117 lines
2.2 KiB
JSON
{
|
|
"lines": [
|
|
{
|
|
"Line": {
|
|
"Labels": {
|
|
"type": "testlog"
|
|
},
|
|
"Raw": "xxheader VALUE1 trailing stuff"
|
|
},
|
|
"MarshaledTime": "2020-01-01T10:00:00+00:00",
|
|
"Meta": {
|
|
"source_ip": "1.2.3.4"
|
|
},
|
|
"Parsed": {
|
|
"random_value" : "41"
|
|
}
|
|
},
|
|
{
|
|
"Line": {
|
|
"Labels": {
|
|
"type": "testlog"
|
|
},
|
|
"Raw": "xxheader VALUE2 trailing stuff"
|
|
},
|
|
"MarshaledTime": "2020-01-01T10:00:05+00:00",
|
|
"Meta": {
|
|
"source_ip": "1.2.3.4"
|
|
},
|
|
"Parsed": {
|
|
"random_value" : "42"
|
|
}
|
|
},
|
|
{
|
|
"Line": {
|
|
"Labels": {
|
|
"type": "testlog"
|
|
},
|
|
"Raw": "xxheader VALUE1 trailing stuff"
|
|
},
|
|
"MarshaledTime": "2020-01-01T10:00:00+00:00",
|
|
"Meta": {
|
|
"source_ip": "1.2.3.4"
|
|
},
|
|
"Parsed": {
|
|
"random_value" : "41"
|
|
}
|
|
},
|
|
{
|
|
"Line": {
|
|
"Labels": {
|
|
"type": "testlog"
|
|
},
|
|
"Raw": "xxheader VALUE1 trailing stuff"
|
|
},
|
|
"MarshaledTime": "2020-01-01T10:00:00+00:00",
|
|
"Meta": {
|
|
"source_ip": "2.2.3.4"
|
|
},
|
|
"Parsed": {
|
|
"random_value" : "41"
|
|
}
|
|
},
|
|
{
|
|
"Line": {
|
|
"Labels": {
|
|
"type": "testlog"
|
|
},
|
|
"Raw": "xxheader VALUE1 trailing stuff"
|
|
},
|
|
"MarshaledTime": "2020-01-01T10:00:00+00:00",
|
|
"Meta": {
|
|
"source_ip": "2.2.3.4"
|
|
},
|
|
"Parsed": {
|
|
"random_value" : "41"
|
|
}
|
|
},
|
|
{
|
|
"Line": {
|
|
"Labels": {
|
|
"type": "testlog"
|
|
},
|
|
"Raw": "xxheader VALUE1 trailing stuff"
|
|
},
|
|
"MarshaledTime": "2020-01-01T10:00:00+00:00",
|
|
"Meta": {
|
|
"source_ip": "2.2.3.4"
|
|
},
|
|
"Parsed": {
|
|
"random_value" : "41"
|
|
}
|
|
}
|
|
],
|
|
"results": [
|
|
{
|
|
"Alert": {
|
|
}
|
|
},
|
|
{
|
|
"Alert": {
|
|
"sources": {
|
|
"2.2.3.4": {
|
|
"scope": "Ip",
|
|
"value": "2.2.3.4",
|
|
"ip": "2.2.3.4"
|
|
}
|
|
},
|
|
"Alert" : {
|
|
"scenario": "test/simple-leaky-cancel",
|
|
"events_count": 2
|
|
}
|
|
}
|
|
}
|
|
|
|
]
|
|
}
|
|
|