Files
zira-etc/crowdsec/hub/parsers/s02-enrich/crowdsecurity/dateparse-enrich.yaml
2023-06-12 09:31:52 +03:00

11 lines
285 B
YAML

filter: "evt.StrTime != ''"
name: crowdsecurity/dateparse-enrich
#debug: true
#it's a hack lol
statics:
- method: ParseDate
expression: evt.StrTime
- target: MarshaledTime
expression: evt.Enriched.MarshaledTime
- meta: timestamp
expression: evt.Enriched.MarshaledTime