Logs to Events Pipeline Examples
Last updated
Last updated
We strongly advise reading the in order to fully understand the functionalities of writing pipelines steps.
The following example demonstrates transformation of a log in a specific format to an event, while applying additional filtering and extraction logic.
In this example, we want to create events for when a user consistently fails to login to a system. We base it on logs with this specific format:
This pipeline will create events with the type multiple_login_failures
for each time a user fails to login for the 5th time or more . It will store the username in .string_attributes
and the attempt number in .float_attributes
.