Cribl 使用Function 的实际例子-02

使用function，最好在特定的pipeline 中实现，全局的话，很大程度抓不到数据，因为pipeline 可以限定source / router, 来创建新的function , 常用的eval.

Let's try a few examples. If you've moved away from the Capture Sample Data modal, restore it:

note

1. If you're not alreadly there, select Manage from Stream's top nav, then select Processing > Pipelines from the submenu.
2. Click the Capture Data button in the right pane.

In any of the capture examples, you may need to increase the capture time to ensure you get events. This can be done when you click the Capture... button.

For ea