Scenario description
Xiao Wang collected the tool's logs into CLS. Now, it is necessary to filter out logs with the operation method of PUT and POST from the cmdb logs.
Raw Log
[
{
"path": "/eks/pod/running",
"clientIP": "1.139.21.123",
"method": "POST"
},
{
"path": "/cmdb/login",
"clientIP": "1.139.21.123",
"method": "PUT"
},
{
"path": "/cmdb/start",
"clientIP": "1.139.21.123",
"method": "GET"
}
]
Processing statement
//path contains 'cmdb' characters, keep the log, filter out the rest
log_keep(regex_match(v("path"),regex="cmdb",full=False))
//method contains POST or PUT characters, keep the log
log_keep(regex_match(v("method"),regex="POST|PUT",full=False))
Processing result
{
"clientIP":"1.139.21.123",
"method":"PUT",
"path":"/cmdb/login"
}
Was this page helpful?