-
Notifications
You must be signed in to change notification settings - Fork 24
AhoCorasick Processor
Refael Mizrahi edited this page Jan 20, 2022
·
3 revisions
This processor uses the ahoCorasick algorithm to find emits(hits) for the input words on the input field. the list of emits is saved on "targetField".
- field - input field to search on
- targetField - output field to save emits on
- inputWords [] - list of words to be the input for the ahoCorasick model
{
"steps": [
{
"ahoCorasick": {
"config": {
"field": "message",
"targetField": "_logzio_regex_sig",
"inputWords": [
"Exception",
"exception"
]
}
}
}
]
}
- Home
-
Pipelines
-
Processors
- Add Field Processor
- Add Tag Processor
- AhoCorasick Processor
- Anonymize Processor
- Append List Processor
- Arrays Intersect Processor
- Base64 Decode Processor
- Convert Processor
- CSV Processor
- Date Processor
- Drop Processor
- External Mapping Source Processor
- GeoIP Processor
- Grok Processor
- JSON Processor
- Key Value Processor
- LowerCase Processor
- Math Processor
- Remove Field Processor
- Remove Tag Processor
- Rename Field Processor
- Split Processor
- Strip Processor
- Substitue Processor
- Substring Processor
- Translate Processor
- UpperCase Processor
- User Agent Processor
- URL Decode Processor
- XML Processor
- DeDot Processor
- Doc Size Processor
- If statement
- Additional Commands
-
Processors