AhoCorasick [ahoCorasick]

This processor uses the ahoCorasick algorithm to find emits(hits) for the input words on the input field. the list of emits is saved on "targetField".

• field - input field to search on
• targetField - output field to save emits on
• inputWords [] - list of words to be the input for the ahoCorasick model

Example

{
  "steps": [
    {
      "ahoCorasick": {
        "config": {
          "field": "message",
          "targetField": "_logzio_regex_sig",
          "inputWords": [
            "Exception",
            "exception"
          ]
        }
      }
    }
  ]
}