Find out which type for acquisition?
You have to provide the
type of an acquisition but how do I know which are available and which is the correct one?5 Replies
Important Information
This post has been marked as resolved. If this is a mistake please press the red button below or type
/unresolve© Created By WhyAydan for CrowdSec ❤️
If
labels.type then most collections have an example via the hub https://app.crowdsec.net/hub/collectionsAssuming, there isn't an example for a collection, what's the recommended way to find it/them out?
Clicking through all parsers within the collection?
if you check the log parser within the collection, the
filter line will most likely start with evt.Parsed.program == 'somestring' the somestring is the labels.type
the evt.Parsed.program is set by the s00 stage parser which you will never need to touch as we are the maintainers of that stage, users always contribute s01 stage itemsResolving Find out which type for acquisition?
This has now been resolved. If you think this is a mistake please run
/unresolve