File tree Expand file tree Collapse file tree 1 file changed +11
-0
lines changed Expand file tree Collapse file tree 1 file changed +11
-0
lines changed Original file line number Diff line number Diff line change @@ -4226,6 +4226,17 @@ Templates are in Jinja2 format with the event provided in the variable "event".
42264226
42274227See the Jinja2 documentation at https://jinja.palletsprojects.com/ .
42284228
4229+ As an extension to the Jinja2 environment, the function "from_json" is
4230+ available for parsing JSON strings into Python structures. This is
4231+ useful if you want to handle complicated structures in the "output"
4232+ field of an event. In that case, you would start your template with a
4233+ line like::
4234+
4235+ {%- set output = from_json(event[' output' ]) %}
4236+
4237+ and can then use "output" as a regular Python object in the rest of
4238+ the template.
4239+
42294240Attachments are template strings, especially useful for sending
42304241structured data. E.g. to send a JSON document including "malware.name"
42314242and all other fields starting with "source."::
You can’t perform that action at this time.
0 commit comments