Adjusting Notebook to new format.

fkie-cad · Jan 9, 2025 · dcf0d09 · dcf0d09
1 parent 402e600
commit dcf0d09
Showing 1 changed file with 45 additions and 9 deletions.
diff --git a/doc/source/development/notebooks/processor_examples/regex.ipynb b/doc/source/development/notebooks/processor_examples/regex.ipynb
@@ -20,7 +20,7 @@
   },
   {
    "cell_type": "code",
-   "execution_count": null,
+   "execution_count": 1,
    "metadata": {},
    "outputs": [],
    "source": [
@@ -62,11 +62,12 @@
     "processor_config = {\n",
     "    \"myconcatenator\":{   \n",
     "        \"type\": \"concatenator\",\n",
-    "        \"specific_rules\": [str(rule_path)],\n",
-    "        \"generic_rules\": [\"/dev\"],\n",
+    "        \"rules\": [str(rule_path), \"/dev\"],\n",
     "        }\n",
     "    }\n",
     "\n",
+    "concatenator = Factory.create(processor_config)\n",
+    "\n",
     "def concat_with_rule(rule_yaml):\n",
     "    mydocument = deepcopy(document)\n",
     "    if rule_file.exists():\n",
@@ -87,9 +88,25 @@
   },
   {
    "cell_type": "code",
-   "execution_count": null,
+   "execution_count": 2,
    "metadata": {},
-   "outputs": [],
+   "outputs": [
+    {
+     "name": "stderr",
+     "output_type": "stream",
+     "text": [
+      "[Deprecated]: regex_fields are no longer necessary. Use Lucene regex annotation.\n"
+     ]
+    },
+    {
+     "name": "stdout",
+     "output_type": "stream",
+     "text": [
+      "before: {'data_stream': {'dataset': 'windows', 'namespace': 'devopslab', 'type': '/logs/'}, '_op_type': 'create'}\n",
+      "after: {'data_stream': {'dataset': 'windows', 'namespace': 'devopslab', 'type': '/logs/'}, '_op_type': 'create', '_index': '/logs/-windows-devopslab'}\n"
+     ]
+    }
+   ],
    "source": [
     "rule_yaml = \"\"\"---\n",
     "filter: 'data_stream.type: \".*lo.*\"'\n",
@@ -106,6 +123,7 @@
     "  delete_source_fields: false\n",
     "\"\"\"\n",
     "\n",
+    "\n",
     "concat_with_rule(rule_yaml)\n"
    ]
   },
@@ -118,9 +136,18 @@
   },
   {
    "cell_type": "code",
-   "execution_count": null,
+   "execution_count": 3,
    "metadata": {},
-   "outputs": [],
+   "outputs": [
+    {
+     "name": "stdout",
+     "output_type": "stream",
+     "text": [
+      "before: {'data_stream': {'dataset': 'windows', 'namespace': 'devopslab', 'type': '/logs/'}, '_op_type': 'create'}\n",
+      "after: {'data_stream': {'dataset': 'windows', 'namespace': 'devopslab', 'type': '/logs/'}, '_op_type': 'create', '_index': '/logs/-windows-devopslab'}\n"
+     ]
+    }
+   ],
    "source": [
     "rule_yaml = \"\"\"---\n",
     "filter: 'data_stream.type: /.*log.*/'    \n",
@@ -146,9 +173,18 @@
   },
   {
    "cell_type": "code",
-   "execution_count": null,
+   "execution_count": 4,
    "metadata": {},
-   "outputs": [],
+   "outputs": [
+    {
+     "name": "stdout",
+     "output_type": "stream",
+     "text": [
+      "before: {'data_stream': {'dataset': 'windows', 'namespace': 'devopslab', 'type': '/logs/'}, '_op_type': 'create'}\n",
+      "after: {'data_stream': {'dataset': 'windows', 'namespace': 'devopslab', 'type': '/logs/'}, '_op_type': 'create', '_index': '/logs/-windows-devopslab'}\n"
+     ]
+    }
+   ],
    "source": [
     "rule_yaml = \"\"\"---\n",
     "filter: 'data_stream.type: /\\\\/lo.*/'    \n",