Closed kstaken closed 5 years ago
It's also critical that if there is an error in the parsing that it should not break the process on deployed jobs. The field in that case is should just be excluded but we'll need to think about surfacing error scenarios like that so that people building rules have some insight into what's going on while they're testing.
If the output of an extraction is a stringified JSON document the
jsonparse
post_process would parse it and store the parsed object intarget_field
.The extracted value provided as input might look something like this.
Then this rule
Would generate
And then you could chain rules. (Note the usage of output:false)
which would have final output.