HelloWorld Parsing Rule

Parsing Rule

HelloWorld

Details

IDHelloWorldParsingRule
From Version8.4.0

Source

HelloWorld.xif HelloWorld.yml
Download History Raw 

[INGEST:vendor="hello", product="world", target_dataset="hello_world_raw", no_hit = keep]
alter _time = created_time;