blob: 1160693ba099416482264f7f3bd066ab02dceb70 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
{
"version": "4.1",
"eventType": "syslogFields",
"description": "newRule_Copy",
"uid": "7tw0vd4q-7170-43e1-8a8b-55e98cabe658",
"phase": "sto2",
"condition": null,
"actions": [
{
"actionType": "copy",
"from": {
"regex": "",
"state": "closed",
"values": [
{
"value": ""
},
{
"value": ""
}
],
"value": "a"
},
"target": "event.commonEventHeader.domain",
"id": "296bcdd0-1d20-11e8-a96d-298fbe0cb0fd"
}
]
}
|