HelloWorld Parsing Rule

Parsing Rule

HelloWorld

Details

IDHelloWorldParsingRule
From Version8.4.0

Rules (XQL)

[INGEST:vendor="hello", product="world", target_dataset="hello_world_raw", no_hit = keep]
alter _time = created_time;