As a named filter, if it has no required parameters.As an object with a type key that corresponds to a named filter and additional keys for customizing that filter.As a regular expression directly, which will be used to redact text matching it.List of filters to be applied to the value.Įach filter can be specified in one of three ways: Any non-string elements willĪny redacted text will be replaced with. For objects, it masks the sensitive data in each string value, but not keysįor arrays and objects it will recurse into any nested arrays or objects.For arrays, it redacts the sensitive data in each string element.For strings, it simply redacts the sensitive data and returns a new string.Its behavior differs depending on the type of value: Whose value needs to be a valid IP address. We recommend using date ranges as the only criteria when the enrichmentįor geoip enrichment tables this condition needs to be a VRL object with a single key-value pair This can be an expensive operation if there are many rows returned by any exact Sequentially scanning through the rows that have been located via any exact matchĬriteria. The given field must be greater than or equal to the from dateĪnd less than or equal to the to date. Index directly into the dataset, which should make this search fairly “cheap” from aĭate range search. Case sensitivityĬan be specified using the case_sensitive argument. The given field must match the value exactly. There are currently two forms of search criteria:Įxact match search. Match for rows to be returned if any fields don’t match, no rows are returned. This function returns the rows that match the provided condition(s). The key-value pairs indicate a field to search mapped to a value to search in that field. Searches an enrichment table for rows that match theįor file enrichment tables this condition needs to be a VRL object in which
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |