Skip to content

AhoCorasick Processor

Refael Mizrahi edited this page Jan 20, 2022 · 3 revisions

AhoCorasick [ahoCorasick]

This processor uses the ahoCorasick algorithm to find emits(hits) for the input words on the input field. the list of emits is saved on "targetField".

  • field - input field to search on
  • targetField - output field to save emits on
  • inputWords [] - list of words to be the input for the ahoCorasick model

Example

{
  "steps": [
    {
      "ahoCorasick": {
        "config": {
          "field": "message",
          "targetField": "_logzio_regex_sig",
          "inputWords": [
            "Exception",
            "exception"
          ]
        }
      }
    }
  ]
}
Clone this wiki locally