brexhq / substation

Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.
https://substation.readme.io
MIT License
330 stars 21 forks source link

feat(condition): Add MetaErr Inspector #217

Closed jshlbrd closed 3 months ago

jshlbrd commented 3 months ago

Description

Motivation and Context

This came up while testing #215 in a production data pipeline. This is functionally equivalent to the MetaErr transform function. You can work around this problem with existing conditions and transforms (MetaSwitch, UtilityDrop, etc.), but this is a shortcut to getting the same functionality.

How Has This Been Tested?

Added unit tests for:

Types of changes

Checklist: