Skip to content

OML is required to support pipeline extraction of KV type data #7

@wensiwei12

Description

@wensiwei12

data

osName=Windows Server 2022 Standard fileHash=aaaaaaaaaaaaa activityID=2254330226851089655 activityType=4008

wpl

package test {
    rule kv {
        (chars)\*
    }
}

oml

X : chars =  pipe take(B1) | kv(activityID);
Y : chars =  pipe take(B2) | kv(fileHash);
Z : chars =  pipe take(B3) | kv(osName);

out

{"X":"Windows Server 2022 Standard","Y":"aaaaaaaaaaaaa","Z":"2254330226851089655"}

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions